Stephen wrote:

Bizarre.

I have qmail-scanner installed using Sophos sweep and SpamAssassin.

When I run the test_installation script,

the innocuous mail arrives
the EICAR.COM e-mail is caught (presumably by perlscanner) and I get a message indicating this
the attached file with the EICAR test virus is caught (this would have to be by sweep) and I get a message indicating this
the spam gets through, probably because I haven't configured spamassassin properly just yet (that's fine, I can investigate that later).


Here's the strange thing, though -- if I send myself an e-mail from an external host (say my Yahoo account) containing or attaching a text file containing the EICAR test virus, qmail just delivers it. Same if I mail the file from a local account. If I scan the file with sweep, it detects the EICAR virus.

So what gives? Why is my test_installation script telling me it is working, when my real-world test seems to indicate otherwise?

Cheers

Stephen

Are you using the QMAILQUEUE patch to run qmail-scanner-queue.pl? What are the contents of your /etc/tcp.smtp file? Did you run 'qmailctl cdb' after updating the QMAILQUEUE environment variable in /etc/tcp.smtp? Do you have enough softlimit memory allocated for sophos sweep?

Joe Zacky



-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to