<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2719.2200" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Courier size=2>I'm sorry. </FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>Well, I know this gonna sounds kinda stupid, but
the fact is I was making changes </FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>in /opt/Mailscanner/etc/MailScanner.conf instead
of /etc/Mailscanner/MailScanner.conf. </FONT><FONT face=Courier size=2>That's
it.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Courier size=2>I'm shamed, but I can tell you I learn a lot of
thing these days.</FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>Thanks again for your patience and understanding
(Im relatively new to linux stuff)</FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>Best Regards</FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>vgm</FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<DIV><FONT face=Courier size=2>P.S. I've told you about my bad
english?</FONT></DIV>
<DIV><FONT face=Courier size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=mailscanner@ECS.SOTON.AC.UK
href="mailto:mailscanner@ECS.SOTON.AC.UK">Julian Field</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, November 07, 2002 4:14
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: F-PROT problem?</DIV>
<DIV><BR></DIV>At 22:10 07/11/2002, you wrote:<BR>
<BLOCKQUOTE class=cite cite="" type="cite"><FONT face=courier size=2>Hi all,
I just wanted to tell you I finally solved the problem whit f-prot. Im happy
right now, and Im getting ready to check some other features in
MailScanner.</FONT></BLOCKQUOTE><BR>What was the solution?<BR>It's useful to
get solutions into the mailing list archive for everyone else's benefit.<BR>
<BLOCKQUOTE class=cite cite="" type="cite">
<DL>
<DD>----- Original Message -----
<DD>From:</B> <A href="mailto:vguerrero@MINAR.COM">Vicente Guerrero M.</A>
<DD>To:</B> <A
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
<DD>Sent:</B> Thursday, November 07, 2002 8:40 AM
<DD>Subject:</B> Re: F-PROT problem?<BR><BR><FONT face=courier size=2>
<DD>I've tried the command you told me and it seems to be working ok since
I got a summary of files been scanned. I checked the script and it seems
to be right too. Some other clue?</FONT>
<DD>
<DD><FONT face=courier size=2>
<DD>Thanks</FONT>
<DD>----- Original Message -----
<DD>From:</B> <A href="mailto:mailscanner@ECS.SOTON.AC.UK">Julian
Field</A>
<DD>To:</B> <A
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
<DD>Sent:</B> Thursday, November 07, 2002 5:02 AM
<DD>Subject:</B> Re: F-PROT problem?<BR><BR>
<DD>Something is going wrong in how MailScanner is calling your copy of
F-Prot.
<DD>If you do these 2 commands, it should output some sort of summary
showing how many files it scanned, at the very least.
<DD><X-TAB> </X-TAB>cd /tmp
<DD><X-TAB> </X-TAB>/usr/lib/MailScaner/f-prot-wrapper
-old -archive -dumb .
<DD>(don't forget the dot on the end)<BR><BR>
<DD>If you get some sort of "command not found" error, then you have
installed your copy of F-Prot somewhere different than the standard
location, and you will need to alter the f-prot-wrapper script so it calls
it in the right place. That script is very simple, you'll soon work out
what you need to change in it.<BR><BR>
<DD>Let us know how you get on.<BR><BR>
<DD>At 23:56 06/11/2002, you wrote:
<BLOCKQUOTE class=cite cite="" type="cite"><FONT face=courier size=2>
<DD>I have RedHat 7.1, Sendmail8.9.3, MailScanner 4.04-1 and f-prot
3.12b.</FONT>
<DD><FONT face=courier size=2>
<DD>Everything its seems to be working ok, but if I send a message from
an external account (hotmail) with a virus attached, I have no warning
about an infected message. I tried the EICAR_test file too, but nothing
happened, I just get these lines in maillog:</FONT>
<DD><FONT face=courier size=2>
<DD>Nov 6 17:34:11 ns0 sendmail[5914]: RAA05914: from=<<A
href="mailto:user@hotmail.com">user@hotmail.com</A>>, size=96715,
class=0, pri=126715, nrcpts=1, msgid=<<A
href="mailto:OE17Bt3J3JCj2fBUA510000094e@hotmail.com">OE17Bt3J3JCj2fBUA510000094e@hotmail.com</A>>,
proto=ESMTP, relay=oe17.law7.hotmail.com [216.33.236.121]
<DD>Nov 6 17:34:11 ns0 MailScanner[5190]: New Batch: Found 2
messages waiting
<DD>Nov 6 17:34:11 ns0 MailScanner[5190]: New Batch: Scanning 1
messages, 97125 bytes
<DD>Nov 6 17:34:12 ns0 MailScanner[5190]: Virus and Content
Scanning: Starting
<DD>Nov 6 17:34:12 ns0 MailScanner[5190]: Uninfected: Delivered 1
messages
<DD>Nov 6 17:34:12 ns0 sendmail[5919]: RAA05914: to=<<A
href="mailto:mail_user@minar.com">mail_user@minar.com</A>>,
delay=00:00:09, xdelay=00:00:00, mailer=local, stat=Sent
<DD>I tested f-prot manually and it says the infection is there
(EICAR_test and an infected file (Magistr). I really apreciate your help
to solve this issue.</FONT>
<DD>
<DD><FONT face=courier size=2>
<DD>BTW, I got warned about some infected messages, but they are the
ones with IFrame tags in it. </FONT>
<DD>
<DD><FONT face=courier size=2>
<DD>Thanks in advance</FONT>
<DD>
<DD><FONT face=courier size=2>
<DD>(Sorry about my poor English)</FONT>
<DD>
<DD><FONT face=courier size=2>
<DD>vgm</FONT></DD></BLOCKQUOTE>
<DD>--
<DD>Julian
Field
Teaching Systems Manager
<DD>jkf@ecs.soton.ac.uk
Dept. of Electronics & Computer Science
<DD>Tel. 023 8059
2817 University of
Southampton
<DD>
Southampton SO17 1BJ </DD></DL></BLOCKQUOTE><BR>
<DIV>--</DIV>
<DIV>Julian
Field
Teaching Systems Manager</DIV>
<DIV>jkf@ecs.soton.ac.uk Dept.
of Electronics & Computer Science</DIV>
<DIV>Tel. 023 8059 2817
University of
Southampton</DIV>
Southampton SO17 1BJ </BLOCKQUOTE></BODY></HTML>