Logwatch being marked as virus

[Martin Hepworth]

2009/8/17 dnsadmin 1bigthink.com <dnsadmin at 1bigthink.com>

> At 01:54 PM 8/17/2009, you wrote:
>
>> The logwatch reports are coming from the localhost (same machine) and 3
>> other machines.
>> MailScanner is not allowing them to send the logwatch report, just marks
>> it
>> as a virus.
>>
>> /etc/MailScanner/rules/spam.whitelist.rules
>>
>> FromOrTo:       root at thismachine.com yes
>> From0rTo:       reports at anothermachine.com yes
>> FromOrTo:       default         no
>>
>> I'm generating the logwatch report on "thismachine.com" and attempting
>> To send to " reports at anothermachine.com".
>>
>> I have clamav as the virus program. The virus it is finding is part of the
>> phising report info.
>>
>
> -Snip-
>
> You are using the spam.whitelist rules, which are behaving themselves just
> fine. Use the virus scanning rules to whitelist. I had the same problem.
> Fixed!
>
> Cheers,
> Glenn
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

or use the global 'Scan Messages' so it doesn't scan from 127.0.0.1 assuming
your machine is a gateway and not an end user or MSA machine!

-- 
Martin Hepworth
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090817/d184eac1/attachment.html