and your email rules for what do in this case are what?<br clear="all"><div>-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div>
<br><br><div class="gmail_quote">On 1 March 2013 03:36, Ryan Braganza <span dir="ltr"><<a href="mailto:ryan.virgo@gmail.com" target="_blank">ryan.virgo@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br clear="all">Hi <br><br>Iam facing a typical problem, in this case am using mailscanner-4.70.7-1 with bitdefender-scanner-7.6-4 .. The virus in mails is getting detected but is still delivered to the users mailbox. Below is a log of one such transaction <br>
<br>New Batch: Scanning 1 messages, 56072 bytes <br>Mar 1 09:02:13 demo1 MailScanner[11182]: Virus and Content Scanning: Starting <br>Mar 1 09:02:18 demo1 MailScanner[11185]: MailScanner E-Mail Virus Scanner version 4.70.7 starting... <br>
Mar 1 09:02:18 demo1 MailScanner[11185]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp <br>Mar 1 09:02:18 demo1 MailScanner[11185]: Using locktype = flock <br>Mar 1 09:02:19 demo1 MailScanner[11182]: /var/spool/MailScanner/incoming/11182/0345E427247.16030/Ticket.zip=>Ticket.exe:infected: Trojan.Agent.ATXG <br>
Mar 1 09:02:19 demo1 MailScanner[11182]: Virus Scanning: Bitdefender found 1 infections <br>Mar 1 09:02:19 demo1 MailScanner[11182]: Virus Scanning: Found 1 viruses <br><br>MILTER: Processing mail in scan_source_destination for mail restrictions <br>
Mar 1 09:02:19 demo1 MailScanner[11182]: MILTER: email-subject: Test Mail <br>Mar 1 09:02:19 demo1 MailScanner[11182]: MILTER: Ultimately the mail sent only to RCPTs: <a href="mailto:a2@mumbai.demo2.nsfleximail.com" target="_blank">a2@mumbai.demo2.nsfleximail.com</a> <br>
Mar 1 09:02:19 demo1 MailScanner[11182]: Requeue: 0345E427247.16030 to 15FA3427249 <br><br><br>USAGE a2 user: 0.003999 sys: 0.003999<br>Mar 1 09:02:19 demo1 postfix/lmtp[11189]: 15FA3427249: to=<<a href="mailto:a2@mumbai.demo2.nsfleximail.com" target="_blank">a2@mumbai.demo2.nsfleximail.com</a>>, orig_to=<<a href="mailto:a2@demo2.nsfleximail.com" target="_blank">a2@demo2.nsfleximail.com</a>>, relay=<a href="http://mumbai.demo1.nsfleximail.com" target="_blank">mumbai.demo1.nsfleximail.com</a>[/var/lib/imap/socket/lmtp], delay=6.7, delays=6.6/0.01/0.01/0.15, dsn=2.1.5, status=sent (250 2.1.5 Ok SESSIONID=<demo1.nsfleximail.com-10421-1362108739-1>)<br>
Mar 1 09:02:19 demo1 postfix/lmtp[11189]: ECMPLOG : 15FA3427249|55381|<<a href="mailto:idcalerts@netcore.co.in" target="_blank">idcalerts@netcore.co.in</a>>|<<a href="mailto:a2@mumbai.demo2.nsfleximail.com" target="_blank">a2@mumbai.demo2.nsfleximail.com</a>>|DOM|<a href="http://mumbai.demo1.nsfleximail.com" target="_blank">mumbai.demo1.nsfleximail.com</a>[/var/lib/imap/socket/lmtp]|-> 250 2.1.5 Ok SESSIONID=<demo1.nsfleximail.com-10421-1362108739-1>|6|sent<br>
Mar 1 09:02:19 demo1 postfix/qmgr[11148]: 15FA3427249: removed<span class="HOEnZb"><font color="#888888"><br><br><br>-- <br><div style="text-align:left"><div style="text-align:left"><div style="text-align:center"><div style="text-align:center">
<font color="#888888"><div style="text-align:center">
-------------------------------------------------------------------------------------------------<br></div></font><b><i>No matter how bad the day is...<br>
There is always a bike ride back home... :-)</i><br></b><font color="#888888">-------------------------------------------------------------------------------------------------</font><br></div><br></div><br></div><br><font color="#888888"><div style="text-align:center">
<span></span></div></font></div><font color="#888888">
</font>
</font></span><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>