[Mimedefang] Missed Viruses

[Stewart James]

I read this reponse and went -blah I am an idiot no core information
about what I am running- I hat it when people do that to me, so I am
really (no really) sorry about that.

MD is 2.41 (I could have sworn I had 2.42 will fix this first).
ClamAV is 0.70 and freshclam checks up once an hour running clamd.

http://lists.vu.edu.au/MD/ENTIRE_MESSAGE is also accessable.

I will upgrade or patch to 2.42 and see if that resolves the problem.
ALthough if someone else has a better idea (like I should give up and
become a farmer - having one of those months) I would be pleased to hear
them.

Regards,

Stewart James

On Tue, 2004-05-18 at 21:59, Rob wrote:
> > -----Original Message-----
> > From: mimedefang-bounces at lists.roaringpenguin.com 
> > [mailto:mimedefang-bounces at lists.roaringpenguin.com] On 
> > Behalf Of Stewart James
> > 
> > I seem to be having an issue with MD and clamAV.
> 
> Version of MD?  If you're not running 2.42 or later then you'll have
> problems with clamav.
> 
> Version of clamav?  You need to be on either 0.70 or a similarly recent
> devel snapshot.  Are you running clamd or clamscan with MD?
>  
> > I have started to quarantine the ones picked up by Trend - and when I
> > submit the entire message to the clamAV online scanner the virus is
> > found. When I scan the entire message locally the virus is not found
> > (which I thought was OK as I did not think clamAV would 
> > unpack it's own mime messages anyway.)
> 
> Maybe your signatures aren't current.  Maybe you've not enabled the
> mailbox option.
> 
> > I have thrown a sample at: http://lists.vu.edu.au/MD/ENTIRE_MESSAGE
> 
> Unfortunately you may have thrown it, but you forgot to allow anybody
> access to it:
> 
> Forbidden
> You don't have permission to access /MD/ENTIRE_MESSAGE on this server.
> 
> Apache/1.3.26 Server at lists.vu.edu.au Port 80
> 
> 
> 
> PLEASE - keep list traffic on the list.  Email sent directly to me may
> be ignored utterly.