On 4/29/2010 9:00 AM, Sharma, Ashish wrote: > Hi, > > Asking the following question again, as I didn't got any reply yet. > > I have an amavisd(clamav and spamassassin) setup with postfix(referred > deployment notes from: http://wiki.centos.org/HowTos/Amavisd) > > Now whenever I send an eicar string in mail body (via my gmail account) the > mail is quarantined and infection is caught, > > but if the eicar signature is put in a txt file or any other file and mail is > sent , then nothing happens and I could see the attachment as it is in the > mailbox, shouldn't it too be caught as infection and put in quarantine. > > Is there something that I am missing? > > Thanks in advance > > Ashish Sharma >
The rules for when the eicar string should be detected are pretty well defined. You can read up on this yourself at http://eicar.org/anti_virus_test_file.htm I expect your test doesn't trigger because the file presented doesn't meet the established standard. -- Noel Jones ------------------------------------------------------------------------------ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
