[Mimedefang] Virus Scanner Scanning attachment twice in 2.16?
Anthony Giggins
agiggins at bigpond.net.au
Sat Jul 20 21:20:06 EDT 2002
I'm running Redhat 7.2 the patched MIMEtools Sendmail 8.12.4 TrendMicro
Interscan Viruswall 3.6.
I've just upgraded from 2.15 to 2.16 and now when I send a test virus
through it appears its being scanned twice?
Ie.
The attachment 'EICAR' was deleted.
It contains a known virus.
Please clean the file and resend it.
Here is the output from the virus scanner:
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A07BB-0/Work/msg-17113-51.bin
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A07BB-0/Work/msg-17113-51.bin
Thinking it was something in my filter I down-graded to 2.15 and sent
the same test but it still only appears to be scanning it once.
Ie.
Here are the details of the modification:
The attachment 'EICAR' was deleted.
It contains a known virus.
Please clean the file and resend it.
Here is the output from the virus scanner:
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
Pattern version 323
Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
Work/msg-2781-1.txt
==============================
Directory:
Searched : 0
File:
Searched : 1
Scan : 1
Infected : 0
Infected : 0(Include files been compressed)
Time:
Start : 7/21/02 11:05:41
Stop : 7/21/02 11:05:41
Used : 00:00
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
Pattern version 323
Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
Work/msg-2781-2.html
==============================
Directory:
Searched : 0
File:
Searched : 1
Scan : 1
Infected : 0
Infected : 0(Include files been compressed)
Time:
Start : 7/21/02 11:05:42
Stop : 7/21/02 11:05:42
Used : 00:00
Virus Scanner v3.1, VSAPI v5.500-0829
Trend Micro Inc. 1996,1997
Pattern version 323
Pattern number 46676
Configuration: -a -r -nl -c1 -c2 -u -s
Work/msg-2781-3.bin
*** Found virus Eicar_test_file in file
/var/spool/MIMEDefang/mdefang-3D3A08E4-0/Work/msg-2781-3.bin
==============================
Directory:
Searched : 0
File:
Searched : 1
Scan : 1
Infected : 1
Infected : 1(Include files been compressed)
Time:
Start : 7/21/02 11:05:43
Stop : 7/21/02 11:05:43
Used : 00:00
It may still be something in my filter so I'll also attach it
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mimedefang-filter
Type: application/octet-stream
Size: 6277 bytes
Desc: not available
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20020720/93b15fdf/attachment.obj>
More information about the MIMEDefang
mailing list