Hi folks Maybe this issue has already been raised on the list. Anyway:
I've just known about the www.testvirus.org page. It sends the EICAR test virus in several different formats/encodings/attachment methods to an address of your choice, for you to test your mail server anti-virus capabilities. I've just tested my 2 qmail-scanner 1.20 installations, one using Kaspersky's AVP 4.0.3.0 as the anti-virus engine and the other one running ClamAV 0.67, both with up-to-date virus signatures databases and redundant scanning _disabled_ in qmail-scanner. These are the results: With AVP: Tests #19, 20, 22 and 24 got through, in all the other tests the viruses were successfully detected and quarantined. Scanning these 4 mails directly off the maildir, kavscanner detected the virus in 3 of them (all except Test #24), so I guess that setting redundant scanning on on qmail-scanner would do it for all tests but #24. With ClamAV: Tests #5, 8, 19, 20, 22 and 24 got through. Running clamscan on these mails directly, the virus is correctly detected on tests #5, 8 and 19, but not on #20, 22 and 24. So, here goes the obvious question: is there something we can do about this apart from activating redundant scanning, which wouldn't block all the viruses anyway? As a side note: I think that it would be worth it adding a couple of lines about this testvirus.org web on the qmail-scanner docs. Regards, -- Vicente Aguilar <[EMAIL PROTECTED]> Departamento de Sistemas Tlf.: 965 98 71 92 Recursos en la Red, S.L.U. http://www.renr.es ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
