mailscanner-mrtg giving low virus results with new install

Rick Chadderdon mailscanner at yeticomputers.com
Thu Mar 19 08:16:14 GMT 2009


Hugo van der Kooij wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Gregory Machin wrote:
>
>   
>> I have setup a new mail scanner using the latest “Version 4.74.16-1 for
>> RedHat, Fedora and Mandrake Linux (and other RPM-based Linux
>> distributions)”   and “ClamAV 0.94.2 and SpamAssassin 3.2.5 installation
>> package.” . All seem to be well no errors in the log files. But when
>> comparing the number of viruses found on the new server, compared to
>> that on the old servers Also running MailScanner (updated to the latest
>> version) and an older version Clamav. There is a big difference in the
>> results on mailscanner-mrtg. The old server found 250 viruses yesterday
>>  where as the new one only 9 .. and the trend is the same today. The
>> virus scans are being logged for the mails and coming back uninfected.
>> Updates are up to date.
>>     
>
> I guess either of these 2 statements is true.
>
>  1. You don't get virus messages that way as often as you think. So the
> stats are accurate.
>
>  2. Your other system is tagging spam as virus due to extra databases
> for ClamAV. Again the stats are accurate.
>
> Hugo.
Another possibility is what happened to me several years ago when I 
started using RBLs at the MTA level - viruses simply stopped getting far 
enough to get counted.  Is it possible that your new setup uses RBLs at 
the MTA and the old one did not?  Or /any/ method of dropping messages 
at the MTA?


More information about the MailScanner mailing list