<html>
At 20:02 21/06/2002, you wrote:<br>
<blockquote type=cite class=cite cite><font face="arial" size=2>I had a
similar situation where emails were not being scanned by MailScanner when
sent through my RAQ but incomming messages where scanned OK if sent to my
RAQ by someone else.</font><br>
<br>
<font face="arial" size=2>This was due to the email message being
hijacked by the ISP I was connecting to and putting the message through
their own mail server and not mine even though in the properties I had
stated the address of my mail server. </font><br>
<font face="arial" size=2>I do not know whether this is of any help or am
I toytally off track</font></blockquote><br>
Ray has a very good point.<br>
What are all the Received: headers on the message that is not being
scanned?<br>
And what is the name of your MailScanner server?<br>
Is it ever passing through your MailScanner server?<br><br>
<blockquote type=cite class=cite cite>----- Original Message -----
<dl>
<dd>From:</b> <a href="mailto:mailscanner@ECS.SOTON.AC.UK">Julian
Field</a>
<dd>To:</b>
<a href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</a>
<dd>Sent:</b> Friday, June 21, 2002 6:56 PM
<dd>Subject:</b> Re: sending a virus from mailscanner's domain is undetected butincoming mail from either our domain or others is detected<br><br>
<dd>At 18:45 21/06/2002, you wrote:<blockquote type=cite class=cite cite><font face="arial" size=2 color="#0000FF">
<dd>Hello,</font><font face="arial" size=2 color="#0000FF">
<dd>No not on the machine running mailscanner, but outlook 2000 on a workstation sent an email to an outside domain with a virus to test and the outside domain received it with the virus in tact.. Its the test virus you referred me earlier to use.. when I reply (from the outside domain) and its incoming to mailscanner, it will pick it up then. only incoming scanning is taken place not outgoing.</font><font face="arial" size=2 color="#0000FF">
<dd>Thanks!</font></blockquote>
<dd>Did it get any X-MailScanner: header at all?
<dd>If not, then it probably didn't go via the MailScanner server.
<dd>If it did, then what did the header say? What is in your mailscanner.conf file?<br><br>
<dd>Unless it is told to, MailScanner doesn't care what addresses are in the email message.<blockquote type=cite class=cite cite><font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From: Julian Field [<a href="mailto:mailscanner@ECS.SOTON.AC.UK" eudora="autourl">mailto:mailscanner@ECS.SOTON.AC.UK</a>]
<dd>Sent: Friday, June 21, 2002 2:40 PM
<dd>To: MAILSCANNER@JISCMAIL.AC.UK
<dd>Subject: Re: sending a virus from mailscanner's domain is undetected butincoming mail from either our domain or others is detected<br><br>
</font>
<dd>At 17:36 21/06/2002, you wrote:
<dd>>Sending a virus from mailscanner's domain to another is undetected, but
<dd>>incoming mail from either our domain or others, is detected.
<dd>>Is this normal? <br><br>
<dd>Did you run the email client program on the machine that is running
<dd>MailScanner, by any chance? If so, did you make the email program talk SMTP
<dd>to localhost:25 or did it invoke sendmail directly? <br><br>
<dd>MailScanner (when running with sendmail) can only scan mail coming in the
<dd>SMTP port. There is no way (with sendmail) of scanning mail poked directly
<dd>at the sendmail binary.
</dl></blockquote></blockquote><br>
<div>--</div>
<div>Julian Field Teaching Systems Manager</div>
<div>jkf@ecs.soton.ac.uk Dept. of Electronics & Computer Science</div>
<div>Tel. 023 8059 2817 University of Southampton</div>
Southampton SO17 1BJ
</html>