anyone have any suggestions??? thanks On Tue, 6 Jul 2004 17:06 , McKeever Chris <[EMAIL PROTECTED]> sent:
> > >On Tue, 06 Jul 2004 12:58:34 , McKeever Chris [EMAIL PROTECTED]> sent: > >>If I turn off any of the DISALLOWABLE extensions, clamscan comes up dry with finding >>viruses, it then gets passed to the internal mail >server >>and the virus is found. >> >>qmail-scanner 1.22 >>clamscan .74 >> >>any suggestions?? > > >here is the latest log with a miss (this email was flagged as a virus on the internal >mailserver running clamscan) >now it says "it is a password-protected zip file", however clamscan on the internal >machine catches and flags it...any ideas?? thanks > > >Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: Check for zip files... >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: potential zip archive file found >(Loves_money.zip). >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is possibly a zip file, run unzip >-Pxx1855417069xx -t /var/spool/qmailscan/tmp/prupref- >mailgate10891502154791319/Loves_money.zip >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is a password-protected zip file >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: run /usr/bin/unzip -Pxx1855417069xx -oj >/var/spool/qmailscan/tmp/prupref- >mailgate10891502154791319/Loves_money.zip 2>&1 >Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: unpacking message took 0.061506 seconds >Tue, 06 Jul 2004 16:43:36 CDT:1319: unsetting QMAILQUEUE env var >Tue, 06 Jul 2004 16:43:36 CDT:1319: g_e_h: return-path is "[EMAIL PROTECTED]", recips >is "[EMAIL PROTECTED]" >Tue, 06 Jul 2004 16:43:36 CDT:1319: from="Mmurray" [EMAIL PROTECTED]>,subj=RE: >Protected message, x-qmail-scanner- >[EMAIL PROTECTED]> via SMTP from 64.108.213.83 >Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: start scanning >Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: recursively scan the directory >/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319/ >Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: starting scan of directory >"/var/spool/qmailscan/tmp/prupref- mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: >scanner=clamscan_scanner,plain_text_msg=0 >Tue, 06 Jul 2004 16:43:36 CDT:1319: clamscan: starting scan of directory >"/var/spool/qmailscan/tmp/prupref- mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:36 CDT:1319: run /usr/local/bin/clamscan -r -m --unzip --unrar >--unzoo --lha --disable-summary --max-recursion=10 -- >max-space=100000 /var/spool/qmailscan/tmp/prupref-mailgate10891502154791319 2>&1 >Tue, 06 Jul 2004 16:43:37 CDT:1319: --output of clamscan was: >-- >Tue, 06 Jul 2004 16:43:37 CDT:1319: clamscan: finished scan of dir >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319" in >1.157789 secs >Tue, 06 Jul 2004 16:43:37 CDT:1319: scanloop: finished scan of >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:37 CDT:1319: p_s: starting scan of directory >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... > > > > > > > > > > > > > > >> >>------------------------------------------- >>Chris McKeever >>If you want to reply directly to me, please use cgmckeever--at--prupref.com >>http://www.prupref.com";>Prudential href="http://www.prupref.com";>Chicago Real Estate >> >> >> >>---- Prudential Preferred Properties www.prupref.com >>Success�Driven�By�Results >>���Results�Driven�By�Commitment >>������Commitment�Driven�By�Integrity >>���������We�Are�Prudential�Preferred�Properties >>��������������� > > > >---- Prudential Preferred Properties www.prupref.com >Success�Driven�By�Results >���Results�Driven�By�Commitment >������Commitment�Driven�By�Integrity >���������We�Are�Prudential�Preferred�Properties >��������������� >�+zf���h��+y��V��v���~)�:ڊx�� mzwA��$ �A�'��x,N���)�-�z�&�rۍ�v ("��lzW�y����h�ל�x�jW�����z/zwh���r��y���^vw��x(��+���'�V+"� 0nV���r������Ƨ���zw�jY��X��X�� �� [ jyޮ�z���+-��.�ǟ�� ��a��l��b��,���y�+���b��?�+-�w�����[ jyޮ�z�� ---- Prudential Preferred Properties www.prupref.com Success�Driven�By�Results ���Results�Driven�By�Commitment ������Commitment�Driven�By�Integrity ���������We�Are�Prudential�Preferred�Properties ���������������
