[Mimedefang] Symantec ScanEngine not Working with MimeDefang 2.44
Johnson, Robert F
robert.f.johnson at intel.com
Fri Oct 22 00:56:10 EDT 2004
I'm trying to run Symantec Scan Engine with MimeDefang 2.44, but without
any success. I used to have it running fine with MimeDefang 2.39. I am
using a later version of the example MimeDefang Filter. I think I've
noticed that configure does not seem to detect SymantecCSS and I have to
manually modify mimedefang.pl to see it. The below error in maillog
will appear for every single message, not intermittent.
Appreciate any help you can provide
Maillog:
Oct 22 04:17:56 petasus-poc mimedefang.pl[15169]:
Unexpected response to AVSCAN or AVSCANLOCAL command: 538 Malformed
container file found. - File not scanned.
Oct 22 04:17:57 petasus-poc mimedefang.pl[15169]:
Problem running virus scanner: code=999, category=swerr, action=tempfail
Oct 22 04:17:57 petasus-poc mimedefang.pl[15169]:
filter: NOQUEUE: tempfail=1
Oct 22 04:17:57 petasus-poc mimedefang[15245]: NOQUEUE:
Tempfailing because filter instructed us to
Excerpt from mimedefang.pl
$SALocalTestsOnly = 1;
$Features{'Virus:SymantecCSS'} = 1; # Ditto
Mimedefang-filter
# Copy original message into work directory as an
"mbox" file for
# virus-scanning
# I've tried both of these.
#md_copy_orig_msg_to_work_dir_as_mbox_file();
md_copy_orig_msg_to_work_dir();
# Scan for viruses if any virus-scanners are
installed
my($code, $category, $action) =
message_contains_virus();
# Lower level of paranoia - only looks for actual
viruses
$FoundVirus = ($category eq "virus");
# Higher level of paranoia - takes care of
"suspicious" objects
# $FoundVirus = ($action eq "quarantine");
if ($FoundVirus) {
md_graphdefang_log('virus', $VirusName,
$RelayAddr);
md_syslog('warning', "Discarding because of
virus $VirusName");
return action_discard();
}
if ($action eq "tempfail") {
action_tempfail("Problem running
virus-scanner");
md_syslog('warning', "Problem running virus
scanner: code=$code, category=$category, action=$action");
}
}
More information about the MIMEDefang
mailing list