On Thu, 24 Feb 2005 12:50:36 -0500, Brent Charbonneau wrote:
>
>I'm trying to figure out whats going on, but I'm stumped.  I had
>qmail-scanner running fine on my FreeBSD machine with
>qmail+vpopmail+..., but last night I portupgraded to 1.25, and now 1/2
>the install test messages don't make it through to delivery.

I'm new to Qmail-Scanner, so I'm not sure this will be accurate.

>Message 1/4 is delivered

Expected.  This message should not be blocked.

>Message 2/4 is caught and a notification is sent to recip

Would seem to be semi-expected.  The message should be blocked, at
least given the default quarantine-attachments.txt file.  The message
does not contain a virus string so should not be caught by your av
scanner.  However, the default quarantine-attachments.txt file directs
Qmail-Scanner to block messages with a 69 byte attachment named
"EICAR.COM" which this message does have.  Your installtion specified
"--notify psender,precips", so, in theory, notifications should have
been sent to both the sender and the recipient.  Like you, I can get
Qmail-Scanner to send notifications to the recipient but not the
sender.  That's one I haven't figured out yet.

>Message 3/4 is caught and no one is notified

Expected.  This has an attachment with the EICAR test virus string and
should be caught by your av scanner (and so blocked).  Your installtion
option "--notify psender,precips" specifies that notifications should
be sent when a message is blocked due to Qmail-Scanner's internal
policy but not when blocked due to being caught by your av scanner.

>Message 4/4 is passed, but never arrives anywhere...

Could be expected.  This is a spam-like message.  The behavior you saw
would happen if 1) the configure script did not find SpamAssassin and
so Qmail-Scanner did not do a spam check on the message and 2) your MUA
does some sort of spam check and blocks the message.  This is what
happens with me.  The message did not arrive in my inbox but rather in
my Junk folder (where my MUA puts the spam it catches).

Hope that answers your question.

-- 
John Mandeville
jemandy at earthlink dot net




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to