<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3199" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Michael,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Which version of RedHat are you
running?</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>I see the problem on CentOS 5.0.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>It may a side effect of force-installing the perl
update.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>It would be nice to know what's actually happening and what
the fix is, though. I'm not a perl guru so it's beyond
me.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Phil</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007></SPAN><FONT
size=2>--<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of
</B>Michael Mansour<BR><B>Sent:</B> 29 November 2007 06:13<BR><B>To:</B>
MailScanner discussion<BR><B>Subject:</B> RE: MailScanner --lint doesn't check
Eicar virus - OK here!<BR></FONT><BR></DIV>
<DIV></DIV>Hi Quentin,<BR><BR><B><I>Quentin Campbell
<Q.G.Campbell@newcastle.ac.uk></I></B> wrote:
<BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid">Phil<BR><BR>It
appears to work here. I get a different result to you:<BR></BLOCKQUOTE>This is
very strange then. <BR><BR>This begs the question, in what cases does this
--lint fail with the Eicar virus check?<BR><BR>I'm pretty sure I saw the test
pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not certain
but pretty sure), but only recently noticed that Eicar was no longer there.
This may have happened after some perl errata upgrades on Linux recently
released by Red Hat.<BR><BR>I'm just interested to know now that if this is
the case, then was would cause that symptom and is it causing other problems I
can't see?<BR><BR>Michael.<BR>
<BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid">[root@cheviot4
MailScanner]# MailScanner --lint<BR>Checking version numbers...<BR>Version
number in MailScanner.conf (4.65.3) is correct.<BR><BR>Your
envelope_sender_header in spam.assassin.prefs.conf is
correct.<BR><BR>Checking for SpamAssassin errors (if you use
it)...<BR>SpamAssassin temp dir =
/var/spool/MailScanner/incoming/SpamAssassin-Temp<BR>SpamAssassin reported
no errors.<BR>MailScanner.conf says "Virus Scanners = clamavmodule
mcafee"<BR>Found these virus scanners installed: clamavmodule,
mcafee<BR>===========================================================================<BR>===========================================================================<BR>Virus
Scanner test reports:<BR>ClamAVModule said "eicar.com was infected:
Eicar-Test-Signature"<BR>McAfee said "/1/eicar.com Found: EICAR test file
NOT a virus."<BR><BR>If any of your virus scanners
(clamavmodule,mcafee)<BR>are not listed there, you should check that they
are installed correctly<BR>and that MailScanner is finding them correctly
via its virus.scanners.conf.<BR>[root@cheviot4 MailScanner]#<BR><BR>Quentin
<BR>---<BR>PHONE: +44 191 222 8209 Information Systems and
Services
(ISS),<BR>
Newcastle
University,<BR>
Newcastle upon Tyne,<BR>FAX: +44 191 222 8765
United Kingdom, NE1
7RU.<BR>------------------------------------------------------------------------<BR><BR><BR><BR><BR><BR>>-----Original
Message-----<BR>>From: mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-<BR>>bounces@lists.mailscanner.info] On Behalf Of
Randal, Phil<BR>>Sent: 28 November 2007 14:10<BR>>To: MailScanner
discussion<BR>>Subject: RE: MailScanner --lint doesn't check Eicar
virus<BR>><BR>>Well spotted!<BR>><BR>>Confirming that it is
broken in 4.65.3<BR>><BR>># MailScanner --lint<BR>>Checking version
numbers...<BR>>Version number in MailScanner.conf (4.65.3) is
correct.<BR>><BR>>Your envelope_sender_header in
spam.assassin.prefs.conf is correct.<BR>><BR>>Checking for
SpamAssassin errors (if you use it)...<BR>>SpamAssassin temp dir =
/var/spool/MailScanner/incoming/SpamAssassin-<BR>>Temp<BR>>SpamAssassin
reported no errors.<BR>>MailScanner.conf says "Virus Scanners =
clamavmodule mcafee"<BR>>Found these virus scanners installed:
clamavmodule,
mcafee<BR>>========================================================================<BR>>===<BR>>========================================================================<BR>>===<BR>><BR>>If
any of your virus scanners (clamavmodule,mcafee)<BR>>are not listed
there, you should check that they are installed correctly<BR>>and that
MailScanner is finding them correctly via
its<BR>>virus.scanners.conf.<BR>><BR>>Cheers,<BR>><BR>>Phil<BR>><BR>>--<BR>>Phil
Randal<BR>>Network Engineer<BR>>Herefordshire Council<BR>>Hereford,
UK<BR>><BR>><BR>><BR>><BR>><BR>>________________________________<BR>><BR>>
From:
mailscanner-bounces@lists.mailscanner.info<BR>>[mailto:mailscanner-bounces@lists.mailscanner.info]
On Behalf Of Michael<BR>>Mansour<BR>> Sent: 28 November 2007
14:03<BR>> To: MailScanner discussion<BR>> Subject: MailScanner --lint
doesn't check Eicar virus<BR>><BR>><BR>> Hi,<BR>><BR>> I used
to be able to run:<BR>><BR>> # MailScanner --lint<BR>> Checking
version numbers...<BR>> Version number in MailScanner.conf (4.65.3) is
correct.<BR>><BR>> Your envelope_sender_header in
spam.assassin.prefs.conf is<BR>>correct.<BR>><BR>> Checking for
SpamAssassin errors (if you use it)...<BR>> SpamAssassin temp dir =
/tmp/SpamAssassin-Temp<BR>> SpamAssassin reported no errors.<BR>>
MailScanner.conf says "Virus Scanners = clamavmodule"<BR>> Found these
virus scanners installed: clamavmodule<BR>>
==================================================================<BR>>=========<BR>>
==================================================================<BR>>=========<BR>><BR>>
If any of your virus scanners (clamavmodule)<BR>> are not listed there,
you should check that they are installed<BR>>correctly<BR>> and that
MailScanner is finding them correctly via
its<BR>>virus.scanners.conf.<BR>><BR>> and see MailScanner test the
Eicar virus between the "===" rows,<BR>>but most recently I see this
doesn't work anymore.<BR>><BR>> Is there something I can check to see
why?<BR>><BR>> When I run the wrapper:<BR>><BR>>
/usr/lib/MailScanner/clamav-wrapper /usr /tmp<BR>><BR>> it finds
clamav and works scans /tmp fine.<BR>><BR>> Thanks.<BR>><BR>>
Michael.<BR>><BR>><BR>><BR>><BR>>________________________________<BR>><BR>>
Make the switch to the world's best email. Get the new Yahoo!7<BR>>Mail
now<BR>><HTTP: a="" *http:="" spankey="" mail="" default_all=""
taglines=""
au.rd.yahoo.com=""><BR>>u.yahoo.com/worldsbestmail/spankey/>
.<BR><BR>--<BR>MailScanner mailing
list<BR>mailscanner@lists.mailscanner.info<BR>http://lists.mailscanner.info/mailman/listinfo/mailscanner<BR><BR>Before
posting, read http://wiki.mailscanner.info/posting<BR><BR>Support
MailScanner development - buy the book off the
website!<BR></HTTP:></BLOCKQUOTE><BR>
<P>
<HR SIZE=1>
Make the switch to the world's best email. <A
href="http://au.rd.yahoo.com/mail/taglines/default_all/mail/spankey/*http://au.yahoo.com/worldsbestmail/spankey/"
target=_blank>Get the new Yahoo!7 Mail now</A>. </BLOCKQUOTE></BODY></HTML>