<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3199" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>I've finally tracked this down:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>yumming from the rpmforge repo had updated perl-MIME-Tools
to version 5.424.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>Downgrading to 5.420 made things work:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2># MailScanner --lint<BR>Trying to setlogsock(unix)<BR>Checking version
numbers...<BR>Version number in MailScanner.conf (4.66.2) is
correct.</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>Your envelope_sender_header in spam.assassin.prefs.conf is
correct.</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>Checking for SpamAssassin errors (if you use it)...<BR>SpamAssassin temp
dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp<BR>SpamAssassin reported
no errors.<BR>MailScanner.conf says "Virus Scanners = clamavmodule
mcafee"<BR>Found these virus scanners installed: clamavmodule,
mcafee<BR>===========================================================================<BR>===========================================================================</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>If any of your virus scanners (clamavmodule,mcafee)<BR>are not listed
there, you should check that they are installed correctly<BR>and that
MailScanner is finding them correctly via its virus.scanners.conf.<BR>[root@mx1
src]# rpm -Uvh perl-MIME-tools-5.420-2.el5.rf.noarch.rpm
--force<BR>Preparing...
########################################### [100%]<BR>
1:perl-MIME-tools
########################################### [100%]<BR>[root@mx1 src]#
MailScanner --lint<BR>Trying to setlogsock(unix)<BR>Checking version
numbers...<BR>Version number in MailScanner.conf (4.66.2) is
correct.</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>Your envelope_sender_header in spam.assassin.prefs.conf is
correct.</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>Checking for SpamAssassin errors (if you use it)...<BR>SpamAssassin temp
dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp<BR>SpamAssassin reported
no errors.<BR>MailScanner.conf says "Virus Scanners = clamavmodule
mcafee"<BR>Found these virus scanners installed: clamavmodule,
mcafee<BR>===========================================================================<BR>===========================================================================<BR>Virus
Scanner test reports:<BR>ClamAVModule said "eicar.com was infected:
Eicar-Test-Signature"<BR>McAfee said
"/1/eicar.com Found: EICAR test file
NOT a virus."</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face="Courier New"
size=2>If any of your virus scanners (clamavmodule,mcafee)<BR>are not listed
there, you should check that they are installed correctly<BR>and that
MailScanner is finding them correctly via its
virus.scanners.conf.<BR></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>This might have had other side-effects other than the
antivirus lint.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=053360418-06122007><FONT face=Arial
color=#0000ff size=2>Phil</DIV></FONT></SPAN>
<DIV><FONT size=2>--<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of
</B>Randal, Phil<BR><B>Sent:</B> 29 November 2007 13:58<BR><B>To:</B>
MailScanner discussion<BR><B>Subject:</B> RE: MailScanner --lint doesn't check
Eicar virus - OK here!<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Michael,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Which version of RedHat are you
running?</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>I see the problem on CentOS 5.0.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>It may a side effect of force-installing the perl
update.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>It would be nice to know what's actually happening and
what the fix is, though. I'm not a perl guru so it's beyond
me.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007><FONT face=Arial
color=#0000ff size=2>Phil</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=400055613-29112007></SPAN><FONT
size=2>--<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of
</B>Michael Mansour<BR><B>Sent:</B> 29 November 2007 06:13<BR><B>To:</B>
MailScanner discussion<BR><B>Subject:</B> RE: MailScanner --lint doesn't
check Eicar virus - OK here!<BR></FONT><BR></DIV>
<DIV></DIV>Hi Quentin,<BR><BR><B><I>Quentin Campbell
<Q.G.Campbell@newcastle.ac.uk></I></B> wrote:
<BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid">Phil<BR><BR>It
appears to work here. I get a different result to you:<BR></BLOCKQUOTE>This
is very strange then. <BR><BR>This begs the question, in what cases does
this --lint fail with the Eicar virus check?<BR><BR>I'm pretty sure I saw
the test pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not
certain but pretty sure), but only recently noticed that Eicar was no longer
there. This may have happened after some perl errata upgrades on Linux
recently released by Red Hat.<BR><BR>I'm just interested to know now that if
this is the case, then was would cause that symptom and is it causing other
problems I can't see?<BR><BR>Michael.<BR>
<BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid">[root@cheviot4
MailScanner]# MailScanner --lint<BR>Checking version numbers...<BR>Version
number in MailScanner.conf (4.65.3) is correct.<BR><BR>Your
envelope_sender_header in spam.assassin.prefs.conf is
correct.<BR><BR>Checking for SpamAssassin errors (if you use
it)...<BR>SpamAssassin temp dir =
/var/spool/MailScanner/incoming/SpamAssassin-Temp<BR>SpamAssassin reported
no errors.<BR>MailScanner.conf says "Virus Scanners = clamavmodule
mcafee"<BR>Found these virus scanners installed: clamavmodule,
mcafee<BR>===========================================================================<BR>===========================================================================<BR>Virus
Scanner test reports:<BR>ClamAVModule said "eicar.com was infected:
Eicar-Test-Signature"<BR>McAfee said "/1/eicar.com Found: EICAR test file
NOT a virus."<BR><BR>If any of your virus scanners
(clamavmodule,mcafee)<BR>are not listed there, you should check that they
are installed correctly<BR>and that MailScanner is finding them correctly
via its virus.scanners.conf.<BR>[root@cheviot4
MailScanner]#<BR><BR>Quentin <BR>---<BR>PHONE: +44 191 222
8209 Information Systems and Services
(ISS),<BR>
Newcastle
University,<BR>
Newcastle upon Tyne,<BR>FAX: +44 191 222
8765 United Kingdom, NE1
7RU.<BR>------------------------------------------------------------------------<BR><BR><BR><BR><BR><BR>>-----Original
Message-----<BR>>From: mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-<BR>>bounces@lists.mailscanner.info] On Behalf Of
Randal, Phil<BR>>Sent: 28 November 2007 14:10<BR>>To: MailScanner
discussion<BR>>Subject: RE: MailScanner --lint doesn't check Eicar
virus<BR>><BR>>Well spotted!<BR>><BR>>Confirming that it is
broken in 4.65.3<BR>><BR>># MailScanner --lint<BR>>Checking
version numbers...<BR>>Version number in MailScanner.conf (4.65.3) is
correct.<BR>><BR>>Your envelope_sender_header in
spam.assassin.prefs.conf is correct.<BR>><BR>>Checking for
SpamAssassin errors (if you use it)...<BR>>SpamAssassin temp dir =
/var/spool/MailScanner/incoming/SpamAssassin-<BR>>Temp<BR>>SpamAssassin
reported no errors.<BR>>MailScanner.conf says "Virus Scanners =
clamavmodule mcafee"<BR>>Found these virus scanners installed:
clamavmodule,
mcafee<BR>>========================================================================<BR>>===<BR>>========================================================================<BR>>===<BR>><BR>>If
any of your virus scanners (clamavmodule,mcafee)<BR>>are not listed
there, you should check that they are installed correctly<BR>>and that
MailScanner is finding them correctly via
its<BR>>virus.scanners.conf.<BR>><BR>>Cheers,<BR>><BR>>Phil<BR>><BR>>--<BR>>Phil
Randal<BR>>Network Engineer<BR>>Herefordshire
Council<BR>>Hereford,
UK<BR>><BR>><BR>><BR>><BR>><BR>>________________________________<BR>><BR>>
From:
mailscanner-bounces@lists.mailscanner.info<BR>>[mailto:mailscanner-bounces@lists.mailscanner.info]
On Behalf Of Michael<BR>>Mansour<BR>> Sent: 28 November 2007
14:03<BR>> To: MailScanner discussion<BR>> Subject: MailScanner
--lint doesn't check Eicar virus<BR>><BR>><BR>>
Hi,<BR>><BR>> I used to be able to run:<BR>><BR>> #
MailScanner --lint<BR>> Checking version numbers...<BR>> Version
number in MailScanner.conf (4.65.3) is correct.<BR>><BR>> Your
envelope_sender_header in spam.assassin.prefs.conf
is<BR>>correct.<BR>><BR>> Checking for SpamAssassin errors (if
you use it)...<BR>> SpamAssassin temp dir =
/tmp/SpamAssassin-Temp<BR>> SpamAssassin reported no errors.<BR>>
MailScanner.conf says "Virus Scanners = clamavmodule"<BR>> Found these
virus scanners installed: clamavmodule<BR>>
==================================================================<BR>>=========<BR>>
==================================================================<BR>>=========<BR>><BR>>
If any of your virus scanners (clamavmodule)<BR>> are not listed there,
you should check that they are installed<BR>>correctly<BR>> and that
MailScanner is finding them correctly via
its<BR>>virus.scanners.conf.<BR>><BR>> and see MailScanner test
the Eicar virus between the "===" rows,<BR>>but most recently I see
this doesn't work anymore.<BR>><BR>> Is there something I can check
to see why?<BR>><BR>> When I run the wrapper:<BR>><BR>>
/usr/lib/MailScanner/clamav-wrapper /usr /tmp<BR>><BR>> it finds
clamav and works scans /tmp fine.<BR>><BR>> Thanks.<BR>><BR>>
Michael.<BR>><BR>><BR>><BR>><BR>>________________________________<BR>><BR>>
Make the switch to the world's best email. Get the new Yahoo!7<BR>>Mail
now<BR>><HTTP: au.rd.yahoo.com="" taglines="" default_all="" mail=""
spankey="" *http:="" a=""><BR>>u.yahoo.com/worldsbestmail/spankey/>
.<BR><BR>--<BR>MailScanner mailing
list<BR>mailscanner@lists.mailscanner.info<BR>http://lists.mailscanner.info/mailman/listinfo/mailscanner<BR><BR>Before
posting, read http://wiki.mailscanner.info/posting<BR><BR>Support
MailScanner development - buy the book off the
website!<BR></HTTP:></BLOCKQUOTE><BR>
<P>
<HR SIZE=1>
Make the switch to the world's best email. <A
href="http://au.rd.yahoo.com/mail/taglines/default_all/mail/spankey/*http://au.yahoo.com/worldsbestmail/spankey/"
target=_blank>Get the new Yahoo!7 Mail now</A>.
</BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>