On Fri, Nov 14, 2003 at 01:42:02PM -0700, Stephen wrote:
> So I took the same file, renamed it with a .exe extension, and tried to 
> send it using Yahoo -- bam, it wouldn't let me; it refused to attach the 
> file because it detected the EICAR pseudo-virus immediately.

OK - so Yahoo caught it

> 
> Tried it using my personal ISP's mail server, same result, it bounced it 
> before it even got to our mail server.

Well then - you can't test it remotely then :-) Sheesh - what good ISPs you
use! ;-)

> 
> I tried setting QS_SPAMASSASSIN="on" in tcp.smtp and reloaded the cdb, 
> but this is only supposed to affect spamc processing. Anyway, it didn't 
> work.

Sorry - bit of a jump there. You're saying you tried to test it remotely but
can't because other ISPs catch test viruses... and so Q-S isn't working???

What's wrong with sending it from another box on your network?

> What I don't grasp is that sweep seems to be scanning the file but 
> passing it through. Scan that same file from the command line, and it 
> detects it. I even used the same switches.

Ah - so Q-S is working - it's just that sweep doesn't appear to work for you.

Heh - you included some of qmail-queue.log up above - but didn't do it for a
message showing the above symptoms! How about that then?


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to