With pattern 653 (from today) this change in how Scanmail reacts to the EICAR file has been returned to the way it was (it no longer passes the EICAR by default anymore).
Cheers > Greetings all, > > I recently had a problem with Scanmail 6.1 that required using the eicar > file to troubleshoot (SM was not quarantining when I configured it to do > so). To my surprise, no matter what I set the action to SM would pass the > eicar file (it sees it and alerts on it...but "passes" it). So needless > to say I got alarmed because who knows what else it was "passing". So I > opened a case. After a week and 12 engineers later I found this: > > http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=16659&submit2=Search > > > Which was also confirmed by this email from Trend’s support: > "We have asked our Pattern PM regarding this issue and he told us that > this was because of requests from marketing to change the active action of > EICAR Test file to pass. This can be resolved by changing the Active > Action on SMEX. We are in negotiations with SMEX team on their preferred > Active Action. Please wait for further announcements." > > I wanted to share this with the list for those of us who are using SM (I > suspect a number of us are since it tends to be the most recommended). > For my current problem this leaves me with no way to trouble shoot it > (sending a live virus through SM to see if it quarantines stuff is what I > am left with…which isn’t gonna happen). > > I personally have big problems with this change (and the fact it was > forced on all Trend customers without making it some sort of option) and I > have told Trend my feelings about it….but I am but a single voice. > Anyhow...now you know if you did not before. > > Enjoy, > > Steve _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
