<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>I found this post in the archives but never saw a
resolution:<o:p></o:p></p>
<p class=MsoNormal>Scan Engine reports that is sees the tests as viruses but MailScanner
simply passes the message through.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-----BEGIN
PGP SIGNED MESSAGE-----<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Hash:
SHA1<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>You
need to send me a fully licenced copy of the package, including any <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>licence
keys I will need to install it. I personally guarantee that I <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>will
not use it for anything other than development, and I guarantee <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>that
no-one else will get access to it. Remember, I've got a reputation <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>to
protect.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Please
send it all to me off-list!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Jeff
Meyer wrote:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
I noticed that MailScanner has support for Symantec Scan Engine, but <o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
it doesn't appear to be working correctly.<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
First, had to make a change to the symscanengine-wrapper:<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
changed:<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
prog=savsecls/savsecls<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
to:<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
prog=ssecls/ssecls<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
Then when testing the wrapper:<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
/usr/lib/MailScanner/symscanengine-wrapper /opt/SYMScan /temp<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
eveything works, even tried on eicar test file and it found it.<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
However, when running it with MailScanner, nothing appears to be <o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
getting logged when testing with eicar files. McAfee, Bitdefender and <o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
ClamAV all log there results, but symantec doesn't. I would like to <o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
see when symantec does catch something and when it doesn't.<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
What do I need to do to change this.<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i>
Jeff<o:p></o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>><i><o:p> </o:p></i></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Jules<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-
-- <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Julian
Field<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>www.MailScanner.info<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Buy
the MailScanner book at www.MailScanner.info/store<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Need
help customising MailScanner?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Contact
me!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Need
help fixing or optimising your systems?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Contact
me!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Need
help getting you started solving new requirements from your boss?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Contact
me!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>PGP
footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-----BEGIN
PGP SIGNATURE-----<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Version:
PGP Desktop 9.5.0 (Build 1112)<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Comment:
(pgp-secured)<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Charset:
ISO-8859-1<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>wj8DBQFFI2k+EfZZRxQVtlQRAmjgAJ9uXuwpt7CpRybVVooicKE0qZ/TZwCgpqoN<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>6rhfvTQiBVB2g9yILPnBpbs=<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>=N9Ji<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-----END
PGP SIGNATURE-----<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-- <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>This
message has been scanned for viruses and<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>dangerous
content by MailScanner, and is<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>believed
to be clean.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>For
all your IT requirements visit www.transtec.co.uk<o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>