Mailscanner / Sophos does not block viruses

ci at holmco.de ci at holmco.de
Tue Nov 12 07:33:22 GMT 2013


On Mon, Nov 11, 2013 at 10:04:19AM -0800 you wrote:

> [output of MailScanner --lint]
>
> Actually not. The above should look like (with sophos instead of Clamd)
> 
> ===========================================================================
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> Clamd::INFECTED::Eicar-Test-Signature :: ./1/
> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
> Virus Scanning: Clamd found 2 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 2 viruses
> ===========================================================================
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Eicar-Test-Signature"
> 
> If any of your virus scanners ...
> 
> It seems from your other posts that sophos is being properly invoked and
> detects the infection as it mails the admin about it, but the detection
> is not being picked up by MailScanner.
> 
> What do you have in the "Options specific to Sophos Anti-Virus" section
> of MailScanner.conf? In particular,
> 
> Allowed Sophos Error Messages =

It is:
Allowed Sophos Error Messages =

(no value)


Greetings,
-- 
R. Cirksena 


More information about the MailScanner mailing list