Sanesecurity Signatures and MailScanner

[Julian Field]

On 23/1/09 21:58, Scott Silva wrote:
> on 1-23-2009 1:27 PM Julian Field spake the following:
>    
>> Steve,
>>
>> Just to confirm before I spend time digging into MailScanner: this is
>> not a MailScanner problem at all, correct?
>>
>> Cheers,
>> Jules.
>>
>>      
> Watching the list traffic it seems to be a problem if you use clamscan instead
> of clamd. Whether it is clam or Mailscanner, I do not know.
>    
Here's a very short patch to 
/usr/lib/MailScanner/MailScanner/SweepViruses.pm that solves the problem:

--- /root/v4/NEWSTABLE/mailscanner/bin/MailScanner/SweepViruses.pm    
2009-01-11 19:27:02.000000000 +0000
+++ SweepViruses.pm    2009-01-25 16:24:33.000000000 +0000
@@ -2724,6 +2724,8 @@
      $file =~ s/^(.\/)?$BaseDir\/?//;
      $file =~ s/^\.\///;
      my ($id,$part) = split /\//, $file, 2;
+    # JKF 20090125 Full message check.
+    $part = "" if $id =~ s/\.(message|header)$//;

      # Only log the whole message if no attachment has been logged
      MailScanner::Log::InfoLog("%s", $logline)

This will be in the next release.

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.