Clam testing

Andrew MacLachlan andy.mac at global-domination.org
Tue Jun 12 11:43:24 IST 2007


My ESVA (1.7.1.5) scanner caught everything tested with clamd...
What messages are in your logs?
Are the permissions correct in your working directory?

-Andy

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Neil
Wilson
Sent: 12 June 2007 11:14
To: MailScanner discussion
Subject: Clam testing

After reading a few of the posts on the list this morning, I decided to
try and send a few 
tests through my clamav, clamd and clamavmodule system, and neither of
them pick up a few of 
the tests listed at http://www.declude.com/Articles.asp?ID=99

Of course I had to allow MailScanner to accept executable files first,
but once I'd done 
this, I received quite a few of the eicar.com files in my mailbox that
the site mentions as 
critical to block.

For example:

eicarspacegap "Tests for detection of the 'Space Gap' vulnerability (all
mailserver AV 
programs need to catch this)."

All of them pick up the "eicarplain" one though.

Does everyone get the same behaviour, or should clam be blocking these?

My clamscan reports the following version details.

ClamAV 0.90.3/3406/Tue Jun 12 10:22:44 2007

Thanks.

Neil



Powered by Linux, driven by passion!

-- 
This email and all contents are subject to the following disclaimer:
http://www.dcdata.co.za/emaildisclaimer.html

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

--
This message was scanned by ESVA and is believed to be clean.
Click here to report this message as spam. 
http://mail-gw.global-domination.org/cgi-bin/learn-msg.cgi?id=3F3382821F
.A7358





--
This message was scanned by ESVA and is believed to be clean.



More information about the MailScanner mailing list