Logwatch being marked as virus
maxsec at gmail.com
Mon Aug 17 19:23:10 IST 2009
2009/8/17 dnsadmin 1bigthink.com <dnsadmin at 1bigthink.com>
> At 01:54 PM 8/17/2009, you wrote:
>> The logwatch reports are coming from the localhost (same machine) and 3
>> other machines.
>> MailScanner is not allowing them to send the logwatch report, just marks
>> as a virus.
>> FromOrTo: root at thismachine.com yes
>> From0rTo: reports at anothermachine.com yes
>> FromOrTo: default no
>> I'm generating the logwatch report on "thismachine.com" and attempting
>> To send to " reports at anothermachine.com".
>> I have clamav as the virus program. The virus it is finding is part of the
>> phising report info.
> You are using the spam.whitelist rules, which are behaving themselves just
> fine. Use the virus scanning rules to whitelist. I had the same problem.
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> Before posting, read http://wiki.mailscanner.info/posting
> Support MailScanner development - buy the book off the website!
or use the global 'Scan Messages' so it doesn't scan from 127.0.0.1 assuming
your machine is a gateway and not an end user or MSA machine!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the MailScanner