Hi Quentin,<br><br><b><i>Quentin Campbell <Q.G.Campbell@newcastle.ac.uk></i></b> wrote:<blockquote class="replbq" style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"> Phil<br><br>It appears to work here. I get a different result to you:<br></blockquote>This is very strange then. <br><br>This begs the question, in what cases does this --lint fail with the Eicar virus check?<br><br>I'm pretty sure I saw the test pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not certain but pretty sure), but only recently noticed that Eicar was no longer there. This may have happened after some perl errata upgrades on Linux recently released by Red Hat.<br><br>I'm just interested to know now that if this is the case, then was would cause that symptom and is it causing other problems I can't see?<br><br>Michael.<br><blockquote class="replbq" style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left:
5px;">[root@cheviot4 MailScanner]# MailScanner --lint<br>Checking version numbers...<br>Version number in MailScanner.conf (4.65.3) is correct.<br><br>Your envelope_sender_header in spam.assassin.prefs.conf is correct.<br><br>Checking for SpamAssassin errors (if you use it)...<br>SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp<br>SpamAssassin reported no errors.<br>MailScanner.conf says "Virus Scanners = clamavmodule mcafee"<br>Found these virus scanners installed: clamavmodule, mcafee<br>===========================================================================<br>===========================================================================<br>Virus Scanner test reports:<br>ClamAVModule said "eicar.com was infected: Eicar-Test-Signature"<br>McAfee said "/1/eicar.com Found: EICAR test file NOT a virus."<br><br>If any of your virus scanners (clamavmodule,mcafee)<br>are not listed there, you should check that they are installed
correctly<br>and that MailScanner is finding them correctly via its virus.scanners.conf.<br>[root@cheviot4 MailScanner]#<br><br>Quentin <br>---<br>PHONE: +44 191 222 8209 Information Systems and Services (ISS),<br> Newcastle University,<br> Newcastle upon Tyne,<br>FAX: +44 191 222 8765 United Kingdom, NE1 7RU.<br>------------------------------------------------------------------------<br><br><br><br><br><br>>-----Original Message-----<br>>From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-<br>>bounces@lists.mailscanner.info] On Behalf Of Randal, Phil<br>>Sent: 28 November 2007
14:10<br>>To: MailScanner discussion<br>>Subject: RE: MailScanner --lint doesn't check Eicar virus<br>><br>>Well spotted!<br>><br>>Confirming that it is broken in 4.65.3<br>><br>># MailScanner --lint<br>>Checking version numbers...<br>>Version number in MailScanner.conf (4.65.3) is correct.<br>><br>>Your envelope_sender_header in spam.assassin.prefs.conf is correct.<br>><br>>Checking for SpamAssassin errors (if you use it)...<br>>SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-<br>>Temp<br>>SpamAssassin reported no errors.<br>>MailScanner.conf says "Virus Scanners = clamavmodule mcafee"<br>>Found these virus scanners installed: clamavmodule, mcafee<br>>========================================================================<br>>===<br>>========================================================================<br>>===<br>><br>>If any of your virus scanners
(clamavmodule,mcafee)<br>>are not listed there, you should check that they are installed correctly<br>>and that MailScanner is finding them correctly via its<br>>virus.scanners.conf.<br>><br>>Cheers,<br>><br>>Phil<br>><br>>--<br>>Phil Randal<br>>Network Engineer<br>>Herefordshire Council<br>>Hereford, UK<br>><br>><br>><br>><br>><br>>________________________________<br>><br>> From: mailscanner-bounces@lists.mailscanner.info<br>>[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael<br>>Mansour<br>> Sent: 28 November 2007 14:03<br>> To: MailScanner discussion<br>> Subject: MailScanner --lint doesn't check Eicar virus<br>><br>><br>> Hi,<br>><br>> I used to be able to run:<br>><br>> # MailScanner --lint<br>> Checking version numbers...<br>> Version number in MailScanner.conf (4.65.3) is correct.<br>><br>> Your envelope_sender_header in
spam.assassin.prefs.conf is<br>>correct.<br>><br>> Checking for SpamAssassin errors (if you use it)...<br>> SpamAssassin temp dir = /tmp/SpamAssassin-Temp<br>> SpamAssassin reported no errors.<br>> MailScanner.conf says "Virus Scanners = clamavmodule"<br>> Found these virus scanners installed: clamavmodule<br>> ==================================================================<br>>=========<br>> ==================================================================<br>>=========<br>><br>> If any of your virus scanners (clamavmodule)<br>> are not listed there, you should check that they are installed<br>>correctly<br>> and that MailScanner is finding them correctly via its<br>>virus.scanners.conf.<br>><br>> and see MailScanner test the Eicar virus between the "===" rows,<br>>but most recently I see this doesn't work anymore.<br>><br>> Is there something I can check to see why?<br>><br>> When I run the
wrapper:<br>><br>> /usr/lib/MailScanner/clamav-wrapper /usr /tmp<br>><br>> it finds clamav and works scans /tmp fine.<br>><br>> Thanks.<br>><br>> Michael.<br>><br>><br>><br>><br>>________________________________<br>><br>> Make the switch to the world's best email. Get the new Yahoo!7<br>>Mail now<br>><http: au.rd.yahoo.com="" taglines="" default_all="" mail="" spankey="" *http:="" a=""><br>>u.yahoo.com/worldsbestmail/spankey/> .<br><br>--<br>MailScanner mailing list<br>mailscanner@lists.mailscanner.info<br>http://lists.mailscanner.info/mailman/listinfo/mailscanner<br><br>Before posting, read http://wiki.mailscanner.info/posting<br><br>Support MailScanner development - buy the book off the website!<br></http:></blockquote><br><p> 
<hr size=1>
Make the switch to the world's best email. <a href="http://au.rd.yahoo.com/mail/taglines/default_all/mail/spankey/*http://au.yahoo.com/worldsbestmail/spankey/" target=_blank>Get the new Yahoo!7 Mail now</a>.