Also make sure you have the latest version of clamav - old versions won't update the virus defs after a while.<br><br><div class="gmail_quote">2009/6/16 Julian Field <span dir="ltr"><<a href="mailto:MailScanner@ecs.soton.ac.uk">MailScanner@ecs.soton.ac.uk</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im"><br>
<br>
On 16/06/2009 13:42, Zate Berg wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
This has happened multiple times.<br>
<br>
ClamAV freshclam fails for what ever reason (usually the mirror(s) are down, i use the US mirrors), when this happens, ClamD "hangs" and MailScanner or ClamD identifies the messages sent to ClamD as a Dos and marks them all as a Virus in MailScanner.<br>
</blockquote></div>
MailScanner should lock out the ClamAV virus scanner while it is being updated if you are using my update_virus_scanners program every hour to do the update. If you are calling freshclam yourself somehow, then I can't help you.<div class="im">
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
so, how do I tell MailScanner to NOT quarantine these "DoS" messages, or in fact to just skip scanning and alert me... i really need this to fail open rather than fail closed and mark everything as a virus.<br>
</blockquote></div>
How are you doing the updates?<br>
<br>
Jules<br>
<br>
-- <br>
Julian Field MEng CITP CEng<br>
<a href="http://www.MailScanner.info" target="_blank">www.MailScanner.info</a><br>
Buy the MailScanner book at <a href="http://www.MailScanner.info/store" target="_blank">www.MailScanner.info/store</a><br>
<br>
Need help customising MailScanner?<br>
Contact me!<br>
Need help fixing or optimising your systems?<br>
Contact me!<br>
Need help getting you started solving new requirements from your boss?<br>
Contact me!<br>
<br>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<br>
Follow me at <a href="http://twitter.com/JulesFM" target="_blank">twitter.com/JulesFM</a> and <a href="http://twitter.com/MailScanner" target="_blank">twitter.com/MailScanner</a><br>
<br>
<br>
-- <br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br><font color="#888888">
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Martin Hepworth<br>Oxford, UK<br>