MailScanner --lint doesn't check Eicar virus - OK here!
Quentin Campbell
Q.G.Campbell at newcastle.ac.uk
Wed Nov 28 14:52:51 GMT 2007
Phil
It appears to work here. I get a different result to you:
[root at cheviot4 MailScanner]# MailScanner --lint
Checking version numbers...
Version number in MailScanner.conf (4.65.3) is correct.
Your envelope_sender_header in spam.assassin.prefs.conf is correct.
Checking for SpamAssassin errors (if you use it)...
SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
SpamAssassin reported no errors.
MailScanner.conf says "Virus Scanners = clamavmodule mcafee"
Found these virus scanners installed: clamavmodule, mcafee
===========================================================================
===========================================================================
Virus Scanner test reports:
ClamAVModule said "eicar.com was infected: Eicar-Test-Signature"
McAfee said "/1/eicar.com Found: EICAR test file NOT a virus."
If any of your virus scanners (clamavmodule,mcafee)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
[root at cheviot4 MailScanner]#
Quentin
---
PHONE: +44 191 222 8209 Information Systems and Services (ISS),
Newcastle University,
Newcastle upon Tyne,
FAX: +44 191 222 8765 United Kingdom, NE1 7RU.
------------------------------------------------------------------------
>-----Original Message-----
>From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>bounces at lists.mailscanner.info] On Behalf Of Randal, Phil
>Sent: 28 November 2007 14:10
>To: MailScanner discussion
>Subject: RE: MailScanner --lint doesn't check Eicar virus
>
>Well spotted!
>
>Confirming that it is broken in 4.65.3
>
># MailScanner --lint
>Checking version numbers...
>Version number in MailScanner.conf (4.65.3) is correct.
>
>Your envelope_sender_header in spam.assassin.prefs.conf is correct.
>
>Checking for SpamAssassin errors (if you use it)...
>SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-
>Temp
>SpamAssassin reported no errors.
>MailScanner.conf says "Virus Scanners = clamavmodule mcafee"
>Found these virus scanners installed: clamavmodule, mcafee
>========================================================================
>===
>========================================================================
>===
>
>If any of your virus scanners (clamavmodule,mcafee)
>are not listed there, you should check that they are installed correctly
>and that MailScanner is finding them correctly via its
>virus.scanners.conf.
>
>Cheers,
>
>Phil
>
>--
>Phil Randal
>Network Engineer
>Herefordshire Council
>Hereford, UK
>
>
>
>
>
>________________________________
>
> From: mailscanner-bounces at lists.mailscanner.info
>[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Michael
>Mansour
> Sent: 28 November 2007 14:03
> To: MailScanner discussion
> Subject: MailScanner --lint doesn't check Eicar virus
>
>
> Hi,
>
> I used to be able to run:
>
> # MailScanner --lint
> Checking version numbers...
> Version number in MailScanner.conf (4.65.3) is correct.
>
> Your envelope_sender_header in spam.assassin.prefs.conf is
>correct.
>
> Checking for SpamAssassin errors (if you use it)...
> SpamAssassin temp dir = /tmp/SpamAssassin-Temp
> SpamAssassin reported no errors.
> MailScanner.conf says "Virus Scanners = clamavmodule"
> Found these virus scanners installed: clamavmodule
> ==================================================================
>=========
> ==================================================================
>=========
>
> If any of your virus scanners (clamavmodule)
> are not listed there, you should check that they are installed
>correctly
> and that MailScanner is finding them correctly via its
>virus.scanners.conf.
>
> and see MailScanner test the Eicar virus between the "===" rows,
>but most recently I see this doesn't work anymore.
>
> Is there something I can check to see why?
>
> When I run the wrapper:
>
> /usr/lib/MailScanner/clamav-wrapper /usr /tmp
>
> it finds clamav and works scans /tmp fine.
>
> Thanks.
>
> Michael.
>
>
>
>
>________________________________
>
> Make the switch to the world's best email. Get the new Yahoo!7
>Mail now
><http://au.rd.yahoo.com/mail/taglines/default_all/mail/spankey/*http://a
>u.yahoo.com/worldsbestmail/spankey/> .
More information about the MailScanner
mailing list