Hi again, Sorry if I sound repetitive, but my problem is not the virus scanner. It works fine for all kinds of mail attachments. My problem is that ASSP does not start the virus scanner for the EICAR test mails. It just lets them through without even calling the virus scanner. In other words, no matter what virus scanner I would use - ASSP does not start it for the EICAR testmails.
An example - first I send myself an empty email with an attached pdf file: ------- Oct-2-09 22:36:13 143.50.13.36 <[email protected] > to: [email protected] diagnostic: FileScan will run command - c:/assp/virusscan.bat 2>&1 Oct-2-09 22:36:19 143.50.13.36 <[email protected] > to: [email protected] diagnostic: FileScan returned C:\WINDOWS\system32>c:\programme\clamav\clamscan c:\assp\virusscan --remove=yes --max-recursion=11 --verbose --log=c:\assp\logs\virusscan\virusscan.log --database=C:\Programme\Clamav\db Scanning \\?\c:\assp\virusscan\a.0.28726.eml c:\assp\virusscan\a.0.28726.eml: OK ----------- SCAN SUMMARY ----------- Known viruses: 625570 Engine version: 0.95.2 Scanned directories: 1 Scanned files: 1 Infected files: 0 Data scanned: 0.08 MB Data read: 0.05 MB (ratio 1.67:1) Time: 5.859 sec (0 m 5 s) Oct-2-09 22:36:20 [Whitelisted] 143.50.13.36 <[email protected]> to: [email protected] whitelisted -- whitelistdb [Test2235] -> c:/assp/notspam/3097.eml; ------- As you can see, ASSP starts the external scanner (clamscan) to check the mail, which is found to be virus free and is delivered to the recipient [email protected]. One minute later, I use the free service at http://www.aleph-tec.com/eicar/index.php to send myself some EICAR virus test files: ------- Oct-2-09 22:37:16 [MessageOK] 38.96.163.23 <[email protected]> to: [email protected] MESSAGE OK [EICAR anti virus test file]; Oct-2-09 22:37:16 [MessageOK] 38.96.163.23 <[email protected]> to: [email protected] MESSAGE OK [EICAR anti virus test file]; Oct-2-09 22:37:17 [MessageOK] 38.96.163.23 <[email protected]> to: [email protected] MESSAGE OK [EICAR anti virus test file]; ------- As you see, these messages pass through ASSP without triggering a virus check (and sure enough, are delivered to my inbox with the virus test file intact). Can somebody tell me where the problem lies? Can you test sending yourself some testmails from http://www.aleph-tec.com/eicar/index.php (only takes a few seconds), just to see whether this is a general ASSP problem or whether this is specific to my installation? Cheers, Stefan. ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
