[AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-16 Thread Christopher J Shaker
You may all know about this, but it was new to me. Found a persistent spammer was sending email to my domain without any score information from amavis-new. After trying several possibilities, I finally realized that he was sending the email with a hand crafted 'X-Virus-Scanned' header that was

Re: [AMaViS-user] Sophos SAVI: Failed to load SAVI virus data The mainbody of virus data is missing (544) at (eval 53) line 127.

2008-02-16 Thread Ralf Hildebrandt
* Ralf Hildebrandt [EMAIL PROTECTED]: * Bernd Probst [EMAIL PROTECTED]: Hi, SAVI = Sophos Anti-Virus Interface Did you install the sophos antivirus engine? Ja logisch, sonst würde ich ja nicht SAVI installieren. And in English: Of course I did, because otherwise I wouldn't feel

Re: [AMaViS-user] Sophos SAVI: Failed to load SAVI virus data The mainbody of virus data is missing (544) at (eval 53) line 127.

2008-02-16 Thread Ralf Hildebrandt
* Bernd Probst [EMAIL PROTECTED]: Hi, SAVI = Sophos Anti-Virus Interface Did you install the sophos antivirus engine? Ja logisch, sonst würde ich ja nicht SAVI installieren. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin Berlin

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-16 Thread Gary V
On 2/16/08, Christopher J Shaker wrote: You may all know about this, but it was new to me. Found a persistent spammer was sending email to my domain without any score information from amavis-new. After trying several possibilities, I finally realized that he was sending the email with a

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-16 Thread Clifton Royston
On Sat, Feb 16, 2008 at 11:31:05AM -0800, Christopher J Shaker wrote: You may all know about this, but it was new to me. Found a persistent spammer was sending email to my domain without any score information from amavis-new. After trying several possibilities, I finally realized that he

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-16 Thread Mark Martinec
Chris, Found a persistent spammer was sending email to my domain without any score information from amavis-new. After trying several possibilities, I finally realized that he was sending the email with a hand crafted 'X-Virus-Scanned' header that was identical to what my Amavis-new would

Re: [AMaViS-user] Sophos SAVI: Failed to load SAVI virus data The mainbody of virus data is missing (544) a t (eval 53) line 127.

2008-02-16 Thread Mark Martinec
Ralf, I compiled the Perl Modules SAVI. Did 'make test' succeed? I added to my amavisd.conf: @av_scanners = ( # ### http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/ ['Sophos SAVI', \sophos_savi ], Ok. Sophos SAVI: Failed to load SAVI virus data The main body of virus data is

Re: [AMaViS-user] Sophos SAVI: Failed to load SAVI virus data The?mainbody of virus data is missing (544) at (eval 53) line 127.

2008-02-16 Thread Ralf Hildebrandt
* Mark Martinec [EMAIL PROTECTED]: Ralf, I compiled the Perl Modules SAVI. Did 'make test' succeed? Yes. I added to my amavisd.conf: @av_scanners = ( # ### http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/ ['Sophos SAVI', \sophos_savi ], Ok. Sophos SAVI: Failed