eTrust 8.1 and MailScanner

[Glenn Steen]

On 20/12/2007, Jens Ahlin <mailing_lists+mailscanner at caleotech.com> wrote:
> > On 20/12/2007, Jens Ahlin <mailing_lists+mailscanner at caleotech.com> wrote:
> >> (snip)
> >> >>
> >> > Might be "te solution"...:-).
> >> > Before doing that though... What MTA do you use? If Postfix, then
> >> > check as the user you run it as... Might be something
> >> > environment-dependant...
> >> >
> >>
> >> I thought of that but no luck there either...
> >> I'm running sendmail, and it's works for the sendmail user. (root)
> >>
> >>       Jens
> > Ok, and if you try clamav instead of clamavmodule, does that work?
> >
>
> Hmmm. Looking in the log clamav found the virus but MailScanner did not
> report it to postmaster and quarantined the virus as with clamavmodule. I
> have the Do not deliver virus setting = yes.
>
> sendmail log:
> Dec 20 14:59:50 tiger MailScanner[7470]: Virus and Content Scanning: Starting
> Dec 20 14:59:52 tiger MailScanner[7470]:
> /var/spool/MailScanner/incoming/7470/./lBKDx5uM007473.message:
> Eicar-Test-Signature FOUND
> Dec 20 14:59:52 tiger MailScanner[7470]: Virus Scanning: ClamAV found 1
> infections
> Dec 20 15:02:03 tiger MailScanner[7470]: Virus Scanning: Found 1 viruses
> Dec 20 15:02:03 tiger MailScanner[7470]: Uninfected: Delivered 1 messages
> Dec 20 15:02:03 tiger MailScanner[7470]: Logging message lBKE1nAY008068 to
> SQL
> Dec 20 15:02:03 tiger MailScanner[7466]: lBKE1nAY008068: Logged to
> MailWatch SQL
> Dec 20 15:02:04 tiger sendmail[8132]: STARTTLS=client,
> relay=mail.yyyyy.com., version=TLSv1/SSLv3, verify=FAIL,
> cipher=DHE-RSA-AES256-SHA, bits=256/256
> Dec 20 15:02:04 tiger sendmail[8132]: lBKE1nAY008068: to=<aaa at yyyy.com>,
>
> Maybe it's time to look back into the backupsets and see if I have made
> some changes ...
>
> feels like all exec's fails...
>
>       Jens

... Or something similar, yep. And since there isn't a whole lot of
others chiming in with you, one can probably draw the conclusion the
problem is limited to ... your particular installation. Tell us more
about it... Pehraps show a MailScanner -V ... might be (yet another)
perl module/repository problem...

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se