RE: [Clamav-users] Virus not identified in /var/spool/mqueue
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Administrator Sent: donderdag 17 maart 2005 17:31 To: 'clamav-users@lists.clamav.net' Subject: [Clamav-users] Virus not identified in /var/spool/mqueue hi, Version of Clamav 0.83/764 with HP-UX 11.11. when i try to scan a sendmail spool directory /var/spool/mqueue that contains mail infected by EICAR test virus and others virus Clamscan does not find any attachments and viruses. Since files in /var/spool/mqueue commonly consist of two separate parts, a 'q' and a 'd' file, one holding the headers (with extra info), the other the data, it does not surprise me that you cannot find viruses in them. I mean, in that shape they are not exactly in mbox mail format (or concatenated header + body format). You should scan in /var/mail/ or something. But better, of course, to scan prior to delivery (scanning in /var/mail/ could create a race condition, where a pop client reads from the mbox file before you could scan it). - Mark System Administrator Asarian-host.org --- If you were supposed to understand it, we wouldn't call it code. - FedEx ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Virus not identified in /var/spool/mqueue
On Thu, 17 Mar 2005 17:29:57 +0100, Administrator [EMAIL PROTECTED] wrote: hi, Version of Clamav 0.83/764 with HP-UX 11.11. when i try to scan a sendmail spool directory /var/spool/mqueue that contains mail infected by EICAR test virus and others virus Clamscan does not find any attachments and viruses. Virus attachments is identified with another virus-scanner like eTrust Antivirus. Simple answer - use one of the many milter options available to scan the mail within sendmail. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche ___ http://lurker.clamav.net/list/clamav-users.html
R: [Clamav-users] Virus not identified in /var/spool/mqueue
Hi, I will use MailScanner from http://www.sng.ecs.soton.ac.uk/mailscanner/. Alberto -- From: [EMAIL PROTECTED] on behalf of Rob MacGregor[SMTP:[EMAIL PROTECTED] Sent: Thursday, March 17, 2005 7:52:46 PM To:ClamAV users ML Subject: Re: [Clamav-users] Virus not identified in /var/spool/mqueue Auto forwarded by a Rule On Thu, 17 Mar 2005 17:29:57 +0100, Administrator [EMAIL PROTECTED] wrote: hi, Version of Clamav 0.83/764 with HP-UX 11.11. when i try to scan a sendmail spool directory /var/spool/mqueue that contains mail infected by EICAR test virus and others virus Clamscan does not find any attachments and viruses. Virus attachments is identified with another virus-scanner like eTrust Antivirus. Simple answer - use one of the many milter options available to scan the mail within sendmail. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
