<div dir="ltr">Check: Quarantine Infections in /etc/MailScanner/MailScanner.conf<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Nov 7, 2013 at 12:45 PM, <span dir="ltr"><<a href="mailto:ci@holmco.de" target="_blank">ci@holmco.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
we are running Mailscanner with Sophos Antivirus as virus scanner.<br>
So far it's working, but Mailscanner does not block the attachment.<br>
I made sure that sophos-wrapper is executed by Mailscanner. The<br>
resulting sophos command line scans and detects files in the spool<br>
directory and delivers exit status > 0.<br>
<br>
Mailscanner notices that the mail is infected. The admin gets<br>
information mail from Mailscanner:<br>
<br>
------------------------------------------------------------------------<br>
Subject: [SAV-LINUX] Threat detected during on-demand scan on <mailserver><br>
To: admin@domain.tld<br>
<br>
A threat was detected during an on-demand scan. Details follow:<br>
3 files scanned.<br>
Number of infections detected: 1<br>
Number of infected files detected: 1<br>
/var/spool/MailScanner/incoming/10458/1VeN1P-0002nK-8i/neicar.txt is infected<br>
with EICAR-AV-Test.<br>
------------------------------------------------------------------------<br>
<br>
The mail reaches the receiptient *with* eicar still attached.<br>
<br>
What's going wrong here?<br>
<br>
<br>
Greetings,<br>
<span class="HOEnZb"><font color="#888888">--<br>
R. Cirksena <<a href="mailto:ci@holmco.de">ci@holmco.de</a>><br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr"><div><div><br>--<br></div>Jerry Benton<br></div>Mailborder Systems<br><a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
</div>
</div>