Yes, you are wright. If you have downloaded from the
ftp://xmail.homelinux.net then you have the latest one.
About the error on Peter's av script...Peter where are you, please help.
Sasa
Dale Qualls pravi:
> There isn't a version in the attach.pl or the attach.conf, any clue where =
> I'd look?
There isn't a version in the attach.pl or the attach.conf, any clue where =
I'd look?
xmail 1.18
clamav
Peter's AV filter
latest MIME::Lite
I'll cross post now, thanks for the info!
>>> [EMAIL PROTECTED] 03/04/04 01:13PM >>>
Which version do you have installed? Please post this on the xmailforum
Which version do you have installed? Please post this on the xmailforum
also, Igor is reading it constantly ( http://xmailforum.homelinux.net )
--Sasa
Dale Qualls pravi:
> I've put in Igor Reno's attach filter but I'm not having any luck. It's =
> returning a "2", but that doesn't mean a bunch
I've put in Igor Reno's attach filter but I'm not having any luck. It's =
returning a "2", but that doesn't mean a bunch to me :) Here's the =
messages that I see in debug mode and nothing is going into the attach log =
files (since it isn't seeing the test .zip file as an attachment). My =
att.
I also noticed clamav wasn't detecting the password-protected .zip files
yesterday.
But it is today (after a freshclam):
Readme.zip: Worm.Bagle.Gen-zippwd FOUND
--- SCAN SUMMARY ---
Known viruses: 20381
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.04 M
I just installed clamav 0.67 and the did freshclam to update. It now
detects the virus.
Sasa Stupar wrote:
> I am also running Peter's av filter with f-prot and clamav and none
> catched it but luckily on my windows workstation I have nod32 which
> catch it and delete it.
> I am just wondering
I am also running Peter's av filter with f-prot and clamav and none
catched it but luckily on my windows workstation I have nod32 which
catch it and delete it.
I am just wondering: is there maybe an option in the Peter's av filter
to delete message if it has a password protected zip attachment?
That's a good thing but it won't intercept all viruses since they may be
stored password protected inside the zip. I've just analyzed a Bagle.K
attachement to a mail that says 'the attached document you've sent us
may contain a virus, please verify its content. The password is '
Adrian Hic
> /tmp/01e1fa7d3bac8e14.scan//Message.zip
> Date: 3.03.2004 Time: 17:21:43 Size: 12422
> ALERT: [Worm/Bagle.J worm] /tmp/01e1fa7d3bac8e14.scan//Message.zip
> <<< Contains signature of the worm Worm/Bagle.J
Mhmh our Antivir says:
Mar 4 09:37:37 ibis antivir[2588]: AntiVir WARNING:
/var/MailR
/tmp/01e1fa7d3bac8e14.scan//Message.zip
Date: 3.03.2004 Time: 17:21:43 Size: 12422
ALERT: [Worm/Bagle.J worm] /tmp/01e1fa7d3bac8e14.scan//Message.zip <<<
Contains signature of the worm Worm/Bagle.J
1.17 + Peter's AV filter + AntiVir gets it fine. Run some updates on the
definitions. -Jim
If you're using Linux I've got a filter that catches all bad attachments
whether they're directly in the message or in a zip file.
Let me know if you want it.
Adrian Hicks
--
MIS & Facilities Manager
Auston Int'l Group Ltd
45 Middle Rd, #01-00 Auston Unicentre
Tel: (65) 6339 4800 ext. 229
Fax
Hi all,
has anyone any XMail antivirus filter that is able to catch W32/[EMAIL PROTECTED]
virus (spreading since yesterday)? As virus .exe file is inside
password-protected zip, my f-prot for dos isn't able to detect it.
Roman
-
To unsubscribe from this list: send the line "unsubscribe xmail"
12 matches
Mail list logo
