If I scan the file thank_you.tif with a non-priv user (/usr/local/rav8/bin/ravav thank_you.pif) rav found the virus.
I debug qmail-scanner-queue.pl putting the command echo '$?'>/tmp/ris after the command ravav to check the exit code.
Then I send a mail with the virus, and in /tmp/ris was the value 256. The exit code must be 2 in case of virus. Is it a ravav problem or qmail-scanner problem?
Michele
Doug Monroe wrote:
Michele Cerioni wrote:
This is the log when I send a mail with a virus.
the file of the virus is thank_you.pif and ravlin found it, but the mail is not blocked.
[snip]
Scan engine 8.11 for i386. Last update: Mon Sep 1 14:58:36 2003 <========== OLD
[snip]
/var/spool/qmailscan/tmp/mail2107718423246129731/thank_you.pif , exit status 0
your AV scan exited with status 0 (no virus) most likely because the virus DB is old and needs update
You can always add a perlscanner rule to block PIF (and other) attachements too- examples are provided in quarantine-attachments.txt
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
