Hi, I running declude virus Ver.1.178i9 and I'm using Sophos anti virus. In the virus.cfg I have a virus code 2 under sophos but when someone is sending a xls file with a password on it I get this error in the virus log below.
03/10/2004 15:02:03 Q743829a501eaae18 Could not find parse string >>> Virus in report.txt
03/10/2004 15:02:03 Q743829a501eaae18 File(s) are INFECTED [: 2]
03/10/2004 15:02:03 Q743829a501eaae18 Scanned: CONTAINS A VIRUS [MIME: 3 20071]
Now if I take out the virus code 2 the email goes through fine but declude or sophos is not detecting the eicarencodedzip and eicardynamicencodedzip virus test. What can I do? Below is part of my virus.cfg.
Sophos returns the exit code of 2 if an error prevents it from processing the E-mail.
What I would recommend in this case is removing the "VIRUSCODE 2" line, and using the latest interim (from http://www.declude.com/interim ) and adding a line "BANEXT EZIP" to the \IMail\Declude\virus.cfg file to block all encrypted .ZIP files.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
