[Mimedefang] Virus Scanner Scanning attachment twice in 2.16?

Anthony Giggins agiggins at bigpond.net.au
Sat Jul 20 21:20:06 EDT 2002


I'm running Redhat 7.2 the patched MIMEtools Sendmail 8.12.4 TrendMicro
Interscan Viruswall 3.6.

I've just upgraded from 2.15 to 2.16 and now when I send a test virus
through it appears its being scanned twice?

Ie.
The attachment 'EICAR' was deleted.
It contains a known virus.
Please clean the file and resend it.
Here is the output from the virus scanner:
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A07BB-0/Work/msg-17113-51.bin
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A07BB-0/Work/msg-17113-51.bin


Thinking it was something in my filter I down-graded to 2.15 and sent
the same test but it still only appears to be scanning it once.

Ie.
Here are the details of the modification:

The attachment 'EICAR' was deleted.
It contains a known virus.
Please clean the file and resend it.
Here is the output from the virus scanner:
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
	Pattern version 323
	Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
	Work/msg-2781-1.txt

==============================
Directory:
	Searched : 0
File:
	Searched : 1
	    Scan : 1
	Infected : 0
	Infected : 0(Include files been compressed)
Time:
	Start : 7/21/02 11:05:41
	 Stop : 7/21/02 11:05:41
	 Used : 00:00
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
	Pattern version 323
	Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
	Work/msg-2781-2.html

==============================
Directory:
	Searched : 0
File:
	Searched : 1
	    Scan : 1
	Infected : 0
	Infected : 0(Include files been compressed)
Time:
	Start : 7/21/02 11:05:42
	 Stop : 7/21/02 11:05:42
	 Used : 00:00
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
	Pattern version 323
	Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
	Work/msg-2781-3.bin
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A08E4-0/Work/msg-2781-3.bin

==============================
Directory:
	Searched : 0
File:
	Searched : 1
	    Scan : 1
	Infected : 1
	Infected : 1(Include files been compressed)
Time:
	Start : 7/21/02 11:05:43
	 Stop : 7/21/02 11:05:43
	 Used : 00:00


It may still be something in my filter so I'll also attach it
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mimedefang-filter
Type: application/octet-stream
Size: 6277 bytes
Desc: not available
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20020720/93b15fdf/attachment.obj>


More information about the MIMEDefang mailing list