MailScanner delivering mail with virus?

Julian Field MailScanner at ecs.soton.ac.uk
Fri Sep 5 11:54:53 IST 2008


Please can you send me an example file out of your queue or quarantine 
(as a raw queue file please, if possible).

topper at libero.it wrote:
> ---------- Initial Header -----------
>
> >From      : mailscanner-bounces at lists.mailscanner.info
> To          : "MailScanner discussion" mailscanner at lists.mailscanner.info
> Cc          : 
> Date      : Thu, 04 Sep 2008 17:35:34 +0200
> Subject : MailScanner delivering mail with virus?
>
> Hello, same trouble here:
>
> Sep  5 12:31:36 dns1 MailScanner[13266]: /var/spool/MailScanner/incoming/13266/./065764C1E2.556EC.message: Email.Phishing.Cur.Gen799.Sanesecurity.08021403 FOUND
> Sep  5 12:31:36 dns1 MailScanner[13266]: Virus Scanning: ClamAV found 1 infections
> Sep  5 12:31:36 dns1 MailScanner[13266]: Infected message 065764C1E2.556EC.message came from
> Sep  5 12:31:36 dns1 MailScanner[13266]: Virus Scanning: Found 1 viruses
> Sep  5 12:31:37 dns1 MailScanner[13266]: Requeue: 3C3A7B68002.E41D3 to A9A6C4C010
> Sep  5 12:31:37 dns1 MailScanner[13266]: Requeue: B4982B68004.80A12 to 1B48B4C193
> Sep  5 12:31:37 dns1 MailScanner[13266]: Requeue: 065764C1E2.556EC to 259CB4C1B1
> Sep  5 12:31:37 dns1 MailScanner[13266]: Requeue: C6D414C111.21050 to CB5A94C1E2
> Sep  5 12:31:37 dns1 MailScanner[13266]: Uninfected: Delivered 4 messages
>
> MailScanner 4.70.7 on Debian Etch.
>
>
>
>
>   
>> Using:
>> MailScanner 4.71.10
>> F-Prot-6 (not the daemon)
>>
>> For some reason, MailScanner has passed some emails that were 
>> virusinfected according to F-Prot.
>> See this excerpt from the log:
>>     
>
>
>   

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list