Virus attachments not replaced with warning text

[Markus Wennrich]

Hi Martin,

eh, no :-)

On 01.09.2010 16:38, Steve replied to himself:
> On 26 August 2010 15:24, Steve <stratos.td at gmail.com> wrote:
>> A classic case of PEBKAC error ...
>>
>> I found that one of the spool directories did not have correct permissions set - it all seems to work fine now.
> Maybe not...
>
> The Eicar test ZIP file gets replaced with warning message just fine,
> but I've just received a spam with a ZIP that was flagged with

I just recently ran in the same problem again for another customer.

With the workaround mentioned below, everythings works for me ... so I
just wanted to let the list know, that the problem still exists in 4.81.4

Markus


On 21.10.2010 18:23, Martin Hepworth wrote:
> Markus
>
> problem with Steve back in August was an issue with spool dir permissions.
>
> -- 
> Martin Hepworth
> Oxford, UK
>
>
> On 21 October 2010 15:06, Markus Wennrich <mwen at f-i-ts.net
> <mailto:mwen at f-i-ts.net>> wrote:
>
>     On 01.09.2010 16:38, Steve wrote:
>     > On 26 August 2010 15:24, Steve <stratos.td
>     <http://stratos.td>@gmail.com <http://gmail.com>> wrote:
>     >
>     > Maybe not...
>     >
>     > The Eicar test ZIP file gets replaced with warning message just
>     fine,
>     > but I've just received a spam with a ZIP that was flagged with
>     > {Virus?} but attachment was included.
>
>     I've got the same problem. eicar-virus get's removed correctly, all
>     other viruses are tagged as {VirusInfected} but are still beeing
>     delivered.
>
>     My current ugly workaround: declare every virus as non-forging:
>
>        Non-Forging Viruses = ./ e/ a/ i/ o/ u/ -/ r/ s/ t
>
>     Now all viruses do get removed ...
>
>     > Are there any known issues with 4.79.11 that would cause this?
>
>     The problem still exists in 4.81.4 ..
>
>     Markus
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20101022/60b18dc1/attachment.html