[Mimedefang] New to mimedefang.
Brad Dameron
bdameron at tscnet.com
Mon Oct 7 18:14:00 EDT 2002
This is correct. And it does work. I used to be able to just paste the EICAR
test virus into the message body and it would be detected. I now see that it
has to be MIME encoded for it to be detected. This is why it didn't seem to
work correctly when infact it was working how it was designed.
---
Brad Dameron Network Account Executive
TSCNet Inc. www.tscnet.com
Silverdale, WA. 1-888-8TSCNET
> -----Original Message-----
> From: mimedefang-admin at lists.roaringpenguin.com
> [mailto:mimedefang-admin at lists.roaringpenguin.com]On Behalf Of Adam
> Beatham
> Sent: Monday, October 07, 2002 12:10 PM
> To: mimedefang at lists.roaringpenguin.com
> Subject: RE: [Mimedefang] New to mimedefang.
>
>
> I believe the default filter will use any available scanner to scan for
> virii. if it detects the feature is there, it uses it.
>
> -adam
>
> At 12:10 PM 10/7/2002 -0700, you wrote:
> >During the install it detected I had AVP installed. Why wouldn't it
> >automatically configure and use this?
> >
> >---
> >Brad
> >Dameron
> >Network Account Executive
> >TSCNet
> >Inc.
> >www.tscnet.com
> >Silverdale,
> >WA.
> >1-888-8TSCNET
> >
> >
> >
> > > -----Original Message-----
> > > From: mimedefang-admin at lists.roaringpenguin.com
> > > [mailto:mimedefang-admin at lists.roaringpenguin.com]On Behalf Of
> > > scuba at centroin.com.br
> > > Sent: Wednesday, October 02, 2002 3:58 PM
> > > To: mimedefang at lists.roaringpenguin.com
> > > Subject: Re: [Mimedefang] New to mimedefang.
> > >
> > >
> > > Hi,
> > >
> > > You must show how your mimedefang-filter is calling the virus
> > > check.
> > >
> > > On Wed, 2 Oct 2002, Brad Dameron wrote:
> > >
> > > |
> > > |Hello,
> > > |
> > > |Running Redhat 7.3 and MIMEDefang 2.21, and AVP 4.0.22.
> > > |
> > > |Now I know the AVP is working as I was previously using
> > > kavkeeper which is
> > > |slow as molasses on a cold day. Mime-defang is scanning the
> > > messages because
> > > |I get the "X-Scanned-By: MIMEDefang 2.21 (www .
> roaringpenguin . com /
> > > |mimedefang)" in the message headers. But it never catch's
> the EICAR test
> > > |virus. So it doesn't look to be passing it through the scanner.
> > > I turned on
> > > |debug and this is what I get:
> > > |
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering mfconnect (line 305)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering mfclose (line 1158)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering cleanup (line 1208)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting cleanup (line 1210)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting mfclose (line 1173)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting mfconnect (line 389)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering envfrom (line 444)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting envfrom (line 623)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering rcptto (line 643)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting rcptto (line 683)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 sendmail[14019]: g92LxMxf014019:
> > > |from=<serpent6877 at yahoo.com>, size=552, class=0, nrcpts=1,
> > > |msgid=<20021002220320.47733.qmail at web11307.mail.yahoo.com>, proto=SM
> > > |TP, daemon=MTA, relay=web11307.mail.yahoo.com [216.136.131.210]
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering header (line 704)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting header (line 756)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering eoh (line 774)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting eoh (line 793)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering body (line 813)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting body (line 860)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering eom (line 890)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering cleanup (line 1208)
> > > |Oct 2 14:59:22 noc6 sendmail[14019]: g92LxMxf014019: Milter
> add: header:
> > > |X-Scanned-By: MIMEDefang 2.21 (www . roaringpenguin . com /
> mimedefang)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting cleanup (line 1270)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting eom (line 1140) ret=0
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering mfclose (line 1158)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Entering cleanup (line 1208)
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting cleanup (line 1270)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 mimedefang[14020]: Exiting mfclose (line 1173)
> > > |ret=SMFIS_CONTINUE
> > > |Oct 2 14:59:22 noc6 sendmail[14024]: g92LxMxf014019:
> > > to=serpent at tscnet.com,
> > > |delay=00:00:00, xdelay=00:00:00, mailer=smtp, pri=30842,
> > > |relay=mail.tscnet.net. [66.152.64.7], dsn=2.0.0
> > > |, stat=Sent (ok 1033596200 qp 10240)
> > > |
> > > |
> > > |Can someone please point me in the right direction. I am not a newb
> > > |linux/perl person. Just missing something.
> > > |
> > > |---
> > > |Brad Dameron
> > > Network Account Executive
> > > |TSCNet Inc.
> > www.tscnet.com
> >|Silverdale,
> >WA.
> >1-888-8TSCNET
> >|
> >|
> >|_______________________________________________
> >|MIMEDefang mailing list
> >|MIMEDefang at lists.roaringpenguin.com
> >|http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> >|
> >
> >
> >- Marcelo
> >
> >
> >_______________________________________________
> >MIMEDefang mailing list
> >MIMEDefang at lists.roaringpenguin.com
> >http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> >
> >_______________________________________________
> >MIMEDefang mailing list
> >MIMEDefang at lists.roaringpenguin.com
> >http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
> -adam, the guy behind the guy behind the guy
>
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
More information about the MIMEDefang
mailing list