Hi, When there is a virus detected is the smtp connection with the sending host dropped ? I am asking this because i got repeating virusses this morning from the same hosts. So it seems they are trying to send it again.
Also hosts which are running legimit mailsrvers (test server sendmail / kerio / domino / qmail etc..) Also i am seeing this in the logging which looks like the connection isn't dropped at all and times out! Jan-13-07 09:18:18 38.96.163.30 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Received-RBL: pass Jan-13-07 09:18:18 38.96.163.30 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] ClamAV: scanning WL=1:0 NP=1:0 LOCAL=1: Jan-13-07 09:18:18 38.96.163.30 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] ClamAV: scanning done FOUND Eicar-Test-Signature Jan-13-07 09:18:18 38.96.163.30 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] virus detected 'Eicar-Test-Signature' Jan-13-07 09:20:23 38.96.163.30 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Connection idle for 120 secs - timeout ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
