Switch from f-secure to avira - No "found ..." message in the log

--[ UxBoD ]-- uxbod at splatnix.net
Mon Feb 11 08:51:48 GMT 2008


What happens if you set Virus Scanners = auto ? and then send a message with EICAR in it ? may be worth stopping MS and once you have sent the message run MailScaner --debug and see what is thrown up.

Regards,

-- 
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net

----- "Götz Reinicke" <goetz.reinicke at filmakademie.de> wrote:

> Hi,
> 
> MailScanner --lint
> Trying to setlogsock(unix)
> Checking version numbers...
> Version number in MailScanner.conf (4.66.5) is correct.
> 
> ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf
> ERROR: is not correct, it should match
> X-Filmakademie-MailScanner-From
> 
> 
> Checking for SpamAssassin errors (if you use it)...
> SpamAssassin temp dir =
> /var/spool/MailScanner/incoming/SpamAssassin-Temp
> SpamAssassin reported no errors.
> MailScanner.conf says "Virus Scanners = f-secure antivir"
> Found these virus scanners installed: clamav, f-secure, antivir
> ===========================================================================
> ===========================================================================
> Virus Scanner test reports:
> F-Secure said "./1/eicar.com: Infected: EICAR_Test_File [Libra]"
> F-Secure said "./1/eicar.com: Infected: EICAR Test File [Orion]"
> F-Secure said "./1/eicar.com: Infected: EICAR-Test-File [AVP]"
> AntiVir said "ALERT: [Eicar-Test-Signature] ./1/eicar.com <<< Contains
> 
> code of the Eicar-Test-Signature virus"
> 
> If any of your virus scanners (clamav,f-secure,antivir)
> are not listed there, you should check that they are installed
> correctly
> and that MailScanner is finding them correctly via its
> virus.scanners.conf.
> 
> 
> 
> Seams O.K. for me ... butm :-)
> 
> Regards,
> Götz

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list