Does the new beta 1.70 with interims address the issues of the No filename in disp Content-Disposition: attachment?
Should I be running it (i.e. more stable) than the 1.69beta? Is the 60sec delay on
timeout for scanning pretty normal, or should I be setting that to less. My only
concern is large attachment scanning.
Thanks again for being a sounding board.
Keith Johnson
-----Original Message-----
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Wed 6/4/2003 6:31 PM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [Declude.Virus] Log File Errors
> Today we had a 'horrible' thing happened with our scanner (have two
> in place F-Prot and InoculateIT), not sure which one had issues:
>
>06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish
>after 60 seconds; terminating.
This is the problem -- one of the virus scanners was getting "stuck", and
not finishing its scanning (which also indirectly caused further problems,
such as the sharing violation).
>his took our server to a crawl as it couldn't scan emails, there was 30
>min. of living he.. there. When I checked the spool folder we were in
>overflow due to the backup of the virus scanning. We are also still
>continuing to receive a ton of these in my logs:
>
>06/04/2003 08:45:39 Qe9ec092201523842 No filename in disp
>Content-Disposition: attachment.
Searching through viruses we've received, we found a W32/[EMAIL PROTECTED] that
could cause this unusual warning. It should not normally appear for
legitimate E-mails, however.
>Also, if I have issues with the scanners, what should be the sequence to
>aid in the problem above.
The key here would be to find out which of the two scanners wasn't
finishing, and fix it. However, that may be difficult to do. The next
release of Declude Virus will log which scanner didn't finish.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
<<winmail.dat>>
