Problem with Mailscanner marking everything as a virus after ClamAV fails update.

Martin Hepworth maxsec at gmail.com
Tue Jun 16 14:26:12 IST 2009


Shouldn't be using freshclam as Julian says. update_virus_scanners is in the
same directory as the MailScanner binary.

-- 
Martin Hepworth
Oxford, UK

2009/6/16 Zate Berg <zate75 at gmail.com>

> Aha!  I am using freshclam, link to docs on update_virus_scanners?
>
> When freshclam fails, things go bad, so I guess that is my issue.
>
> Zate
>
>
>
> On Tue, Jun 16, 2009 at 8:57 AM, Julian Field <MailScanner at ecs.soton.ac.uk
> > wrote:
>
>>
>>
>> On 16/06/2009 13:42, Zate Berg wrote:
>>
>>> This has happened multiple times.
>>>
>>> ClamAV freshclam fails for what ever reason (usually the mirror(s) are
>>> down, i use the US mirrors), when this happens, ClamD "hangs" and
>>> MailScanner or ClamD identifies the messages sent to ClamD as a Dos and
>>> marks them all as a Virus in MailScanner.
>>>
>> MailScanner should lock out the ClamAV virus scanner while it is being
>> updated if you are using my update_virus_scanners program every hour to do
>> the update. If you are calling freshclam yourself somehow, then I can't help
>> you.
>>
>>> so, how do I tell MailScanner to NOT quarantine these  "DoS" messages, or
>>> in fact to just skip scanning and alert me... i really need this to fail
>>> open rather than fail closed and mark everything as a virus.
>>>
>> How are you doing the updates?
>>
>> Jules
>>
>> --
>> Julian Field MEng CITP CEng
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>>
>> Need help customising MailScanner?
>> Contact me!
>> Need help fixing or optimising your systems?
>> Contact me!
>> Need help getting you started solving new requirements from your boss?
>> Contact me!
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090616/b23b97ab/attachment.html


More information about the MailScanner mailing list