Logwatch being marked as virus

[Jim Wirtz]

The logwatch reports are coming from the localhost (same machine) and 3
other machines.
MailScanner is not allowing them to send the logwatch report, just marks it
as a virus.

/etc/MailScanner/rules/spam.whitelist.rules

FromOrTo:       root at thismachine.com yes
From0rTo:       reports at anothermachine.com yes
FromOrTo:       default         no

I'm generating the logwatch report on "thismachine.com" and attempting 
To send to " reports at anothermachine.com".

I have clamav as the virus program. The virus it is finding is part of the
phising report info.

I thought that any address in the whitelist would not be checked, but passed
thru, but it appears
To do the virus check anyway?

Jim

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jules Field
Sent: Monday, August 17, 2009 11:25 AM
To: MailScanner discussion
Subject: Re: Logwatch being marked as virus

How about you whitelist the host the logwatch reports come from? Does 
that host generate any other mail at all?
How did you create your whitelist, and exactly what steps did you use to 
do it?

On 17/08/2009 17:03, Jim Wirtz wrote:
>
> I've recently upgraded to MailScanner version 4.77.10 and now all my 
> Logwatch reports are
>
> Being marked has having a virus of different types, so I no longer get 
> my reports. I've attempted
>
> To create a whitelist but it seems to be ignored by MailScanner?
>
> How do I get MailScanner to pass my reports again?
>
> Jim
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean. 

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.56/2302 - Release Date: 08/17/09
06:08:00


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.