Markus<br><br>problem with Steve back in August was an issue with spool dir permissions.<br><br clear="all">-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 21 October 2010 15:06, Markus Wennrich <span dir="ltr"><<a href="mailto:mwen@f-i-ts.net">mwen@f-i-ts.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On 01.09.2010 16:38, Steve wrote:<br>
> On 26 August 2010 15:24, Steve <<a href="http://stratos.td" target="_blank">stratos.td</a>@<a href="http://gmail.com" target="_blank">gmail.com</a>> wrote:<br>
><br>
</div><div class="im">> Maybe not...<br>
><br>
> The Eicar test ZIP file gets replaced with warning message just fine,<br>
> but I've just received a spam with a ZIP that was flagged with<br>
> {Virus?} but attachment was included.<br>
<br>
</div>I've got the same problem. eicar-virus get's removed correctly, all<br>
other viruses are tagged as {VirusInfected} but are still beeing delivered.<br>
<br>
My current ugly workaround: declare every virus as non-forging:<br>
<br>
Non-Forging Viruses = ./ e/ a/ i/ o/ u/ -/ r/ s/ t<br>
<br>
Now all viruses do get removed ...<br>
<div class="im"><br>
> Are there any known issues with 4.79.11 that would cause this?<br>
<br>
</div>The problem still exists in 4.81.4 ..<br>
<font color="#888888"><br>
Markus<br>
</font><div><div></div><div class="h5"><br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</div></div></blockquote></div><br>