>> From: "Eddie Cornejo" <[EMAIL PROTECTED]>
>> Date: Thu, 25 Jan 2001 13:01:52 -0600
>> It seems to be catching a fair amount of virus infected messages, but it
is also catching a lot of non-infected messages as well. <<
Well, the KEY is to analyze the virus.log file and use the /REPORT switch to
turn on reporting for VirusScan itself. If necessary turn on the DECLUDE
debug logging so you can see what's happening. Diagnose and fix the
underlying problem that your VirusScanner is having - and that will fix the
resulting DECLUDE trouble.
This had happened to me in EARLY versions of DECLUDE and when I turned on
logging I noticed that the VirusScan command line was truncated. After
fixing that, I've never seen a false positive again.
Here are MY two configuration files:
File: Virus.cfg
GONEISBAD TRUE
LOGFILE D:\IMail\spool\virus.log
LOGLEVEL high
LOG_OK NONE
SCANFILE D:\Progra~1\Common~1\Networ~1\VirusS~1\4.0.xx\SCAN.EXE /LOAD
D:\IMAIL\Declude\SCAN.CFG
File: SCAN.CFG
/ALL /NOMEM /SILENT /ANALYZE /ALERTPATH
D:\Progra~1\Common~1\Networ~1\AlertM~1\Queue /REPORT
D:\Imail\Spool\VirusReport.txt
Best Regards
Andy Schmidt
Argos Networks
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-9411 x20 (Business)
Fax: +1 201 934-9206
http://www.ArgosWeb.net/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
