Logwatch being marked as virus

[Jim Wirtz]

Thanks Gleen....

That fixed it!.. took a couple trys before I realized this was where I
wanted NO as the final option.
That No I didn't want it scanned, but yes to the default action.

/etc/MailScanner/rules/virus.scanning.rules

FromOrTo:       root at thismachine.com no
From0rTo:       reports at anothermachine.com no
FromOrTo:       default         yes


-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of dnsadmin
1bigthink.com
Sent: Monday, August 17, 2009 1:03 PM
To: MailScanner discussion
Subject: RE: Logwatch being marked as virus

At 01:54 PM 8/17/2009, you wrote:
>The logwatch reports are coming from the localhost (same machine) and 3
>other machines.
>MailScanner is not allowing them to send the logwatch report, just marks it
>as a virus.
>
>/etc/MailScanner/rules/spam.whitelist.rules
>
>FromOrTo:       root at thismachine.com yes
>From0rTo:       reports at anothermachine.com yes
>FromOrTo:       default         no
>
>I'm generating the logwatch report on "thismachine.com" and attempting
>To send to " reports at anothermachine.com".
>
>I have clamav as the virus program. The virus it is finding is part of the
>phising report info.

-Snip-

You are using the spam.whitelist rules, which are behaving themselves 
just fine. Use the virus scanning rules to whitelist. I had the same 
problem. Fixed!

Cheers,
Glenn 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 
No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.56/2302 - Release Date: 08/17/09
06:08:00


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.