Jason Staudenmayer pravi:
I'm not picking them off either. Qmail+qmail-scanner-1.20rc3+clamav
They just get blocked due to the extension and not because they're virii??
When I scan the quarantine dir nothing comes up with either clamscan or
pavcl.
-----Original Message-----
From: Gerry Doris [mailto:[EMAIL PROTECTED]
Sent: Monday, September 22, 2003 3:41 PM
To: [EMAIL PROTECTED]
Subject: Re: EMail virus?
Benjamin J. Weiss pravi:
What are the subject lines? I'm curious if we're talking about the same
email....
Ben
we are talking about mail that looks like very convincing message from
MS with an exe file attached. Subject are different: Latest net update,
Security patch for MS, etc.
I've had MailScanner/F-Prot/ClamAV/Trend filtering out all of these. I've
received somewhere close to 100 on my home server since Firday. The
messages I get are:
The following e-mail messages were found to have viruses in them:
Sender: [EMAIL PROTECTED]
IP Address: 208.38.58.58
Recipient: [EMAIL PROTECTED]
Subject: Newest Net Security Update
MessageID: h8MJLiom004304
Report: ClamAV: patch.exe contains Worm.Gibe.F
F-Prot:
/var/spool/MailScanner/incoming/30420/h8MJLiom004304/patch.exe
Infection: W32/[EMAIL PROTECTED]
Trend: Found virus WORM_SWEN.A in file
./h8MJLiom004304/patch.exe
MailScanner: Executable DOS/Windows programs are dangerous in
email (patch.exe)
No programs allowed (patch.exe)
This message just arrived. As you can see all three scanners +
MailScanner flagged the problem. I don't understand why your install is
missing any of these???
Gerry
By the way, the virus I get all the time is recognized as Worm.Gibe.C.1.
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list
