Mike Burkhouse wrote:
> 
> Hi All,
> 
> Thanks Doug, but no joy.  I reconfigured twice, once for learningvoyage.com
> and then for webserver.learningvoyage.com.  When I ran test_installation.sh,
> EICAR was caught and quarantined and email went to the appropriate admin,
> however, when I sent myself EICAR in an email, it came through in both
> configurations :( .  This is the current config for qmail-scanner-queue.pl:
> 
> --spooldir /var/spool/qmailscan
> --qmaildir /var/qmail
> --bindir /var/qmail/bin
> --qmail-queue-binary /var/qmail/bin/qmail-queue
> --admin mburkhouse
> --domain webserver.learningvoyage.com
> --notify sender,admin
> --local-domains webserver.learningvoyage.com
> --silent-viruses klez
> --lang en_GB --debug 1
> --unzip 1
> --add-dscr-hdrs yes
> --archive 0
> --redundant yes
> --log-details
> --fix-mime 1
> --scanners "auto"

oops - my bad..the --domain and --local-domains only control the alerting
functions. 

further thoughts- I suspect either:
- your EICAR test file is not named eicar.com
- your EICAR test file is of a -diff- size than that defined in your rules
  my perlscan rule says
     EICAR.COM               69      EICAR Test Virus
  so if the file size were, say, 68 bytes, it wouldn't be trapped?
- you have no av product installed
- you av product may be installed in a non-standard location 
  (not in your PATH)
- the --scanner "auto" is not finding any installed av products.

RE: installed av products (if that's the problem) - when you run your
configure script, what gets output? Looking for the output around this
section:

  Content/Virus Scanners installed on your System

  [some product/path info here]

  Qmail-Scanner details.

you may have to explicitly define the scanners you have installed?


-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to