[Mimedefang] Symantec ScanEngine not Working with MimeDefang 2.44

Johnson, Robert F robert.f.johnson at intel.com
Fri Oct 22 00:56:10 EDT 2004


I'm trying to run Symantec Scan Engine with MimeDefang 2.44, but without
any success.  I used to have it running fine with MimeDefang 2.39.  I am
using a later version of the example MimeDefang Filter.  I think I've
noticed that configure does not seem to detect SymantecCSS and I have to
manually modify mimedefang.pl to see it.  The below error in maillog
will appear for every single message, not intermittent.

Appreciate any help you can provide

Maillog:
		Oct 22 04:17:56 petasus-poc mimedefang.pl[15169]:
Unexpected response to AVSCAN or AVSCANLOCAL command: 538 Malformed
container file found. - File not scanned.
		Oct 22 04:17:57 petasus-poc mimedefang.pl[15169]:
Problem running virus scanner: code=999, category=swerr, action=tempfail
		Oct 22 04:17:57 petasus-poc mimedefang.pl[15169]:
filter: NOQUEUE:  tempfail=1
		Oct 22 04:17:57 petasus-poc mimedefang[15245]: NOQUEUE:
Tempfailing because filter instructed us to


Excerpt from mimedefang.pl
		$SALocalTestsOnly = 1;

		$Features{'Virus:SymantecCSS'} = 1; # Ditto


Mimedefang-filter
		    # Copy original message into work directory as an
"mbox" file for
		    # virus-scanning

		# I've tried both of these.
		    #md_copy_orig_msg_to_work_dir_as_mbox_file();
		    md_copy_orig_msg_to_work_dir();

		    # Scan for viruses if any virus-scanners are
installed
		    my($code, $category, $action) =
message_contains_virus();

		    # Lower level of paranoia - only looks for actual
viruses
		    $FoundVirus = ($category eq "virus");

		    # Higher level of paranoia - takes care of
"suspicious" objects
		    # $FoundVirus = ($action eq "quarantine");

		    if ($FoundVirus) {
		        md_graphdefang_log('virus', $VirusName,
$RelayAddr);
		        md_syslog('warning', "Discarding because of
virus $VirusName");
		        return action_discard();
		    }

		    if ($action eq "tempfail") {
		        action_tempfail("Problem running
virus-scanner");
		        md_syslog('warning', "Problem running virus
scanner: code=$code, category=$category, action=$action");
		    }
		}






More information about the MIMEDefang mailing list