<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-GB link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Not sure if I’m going to do a good job of explaining
this but here goes.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Our MailScanner is configured to check for viruses using
ClamAV and to check filenames/types using the default conf files that come with
MailScanner.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Let’s say I email myself the eicar.com test file from
outside the network.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>It’s a file that would be blocked as it’s a
virus, and also because it’s an executable.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>As a sender I don’t receive a “message blocked”
report which is what I want as it’s a virus.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>As a recipient I do receive a “someone sent you a
virus” report, though is also gives me the MailScanner report output
about the file type:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>At Sun Jun 10 18:33:52 2007 the scanner said:<o:p></o:p></p>
<p class=MsoNormal> ClamAV: eicar.com contains Eicar-Test-Signature
<o:p></o:p></p>
<p class=MsoNormal> MailScanner: Executable DOS/Windows programs
are dangerous in email (eicar.com)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>It’s only a small thing, but is there any way around
this? i.e. if it’s a virus don’t bother to check any further as it’s
a virus and I want to delete it?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>TIA,<o:p></o:p></p>
<p class=MsoNormal>Paul<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:"Tahoma","sans-serif"'>Paul
Hutchings<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:"Tahoma","sans-serif"'>Network
Administrator, MIRA Ltd.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:"Tahoma","sans-serif"'>Tel:
44 (0)24 7635 5378<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:"Tahoma","sans-serif"'>Fax:
44 (0)24 7635 8378<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:"Tahoma","sans-serif"'><a
href="mailto:paul.hutchings@mira.co.uk">mailto:paul.hutchings@mira.co.uk</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
<br><br><hr>
<font face=tahoma,arial size=2>
<b>MIRA Ltd.</b><br>
Watling Street, Nuneaton, Warwickshire, CV10 0TU, England.<br>
Registered in England No. 402570<br>
VAT Registration GB 114 5409 96<br>
<br>
The contents of this e-mail are confidential and are solely for the use of the intended recipient.<br>
If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax.<br>
You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.<br>
</html>