query if mailscanner using clamscan

Julian Field MailScanner at ecs.soton.ac.uk
Sun Jul 29 15:19:35 IST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Hugo van der Kooij wrote:
> On Sun, 29 Jul 2007, Julian Field wrote:
>
>> You have your wish. 4.62.7-2 will detect multiple clam scanners
>> installed and will use the most sensible one, when you specify "Virus
>> Scanners = auto". The scanners actually used will be in the maillog.
>>
>> Please download it and give it a try.
>>
>> I can't see a way to easily test to see if a scanner is broken, sorry.
>
> I was afraid of that. I can not think of a simple test scenario either.
The only thing I can think of is to ship with a copy of Eicar. Copy the 
Eicar file into the MailScanner/incoming/<message-id> directory, where 
message-id is a number I make up (1 would do). Call the installed 
scanners and check that they all return a valid virus report containing 
a report on the file and nothing else (no error messages or anything 
like that).

So it's quite possible to do. I just think that it will be some work to 
write, and I'm not 100% convinced it is really worth the bother. As far 
as I can remember, I think you are the only person to ever ask for this. 
Maybe one day.

>
> Perhaps if the error condition is clear enough in the log I can think 
> of a trigger within logwatch and report on it.
I have never used logwatch myself, but was quite pleased to see it had 
direct MailScanner support within it. Always nice to see that someone 
thinks my work is useful enough for some other people to write support 
for it into their own utilities. :-)

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGrKH4EfZZRxQVtlQRAvoWAJ9gSEoAGlJDgL56MUfLTtrd2eezFACfbq/9
33XsqtOci3Ue1ALiEaSUYrU=
=o7N3
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list