On 12 Sep 2002 at 20:07, Juan Hector Medina wrote: > Hi!. > > I installled the CLAMAV and the script from Goesta Smekal > and i send a email with virus to test the program... > and when i try to send and recive email, my email gets lock > I check my Mail directory in the server: > I have one email and open it by terminal and is the mail that wrote the > script saying that is infected.. > but i can't download it.... > > i need to remove to manually the message to get my inbox work... > any help?
Hope I can help ... but I need some info first: What OS/XMail/Perl/ClamAV versions do you use ? Did you check the path settings within the 'mailscan.pl' before you set up your 'filters/*.tab' ? Could you please send me such a blocking message (as attachment) so i can inspect it ? Are non-infected messages delivered correctly ? Do you get log entries ? All you should have to edit in he script are lines 40-43, these contain info about your local setup, and lines 203-209, which are the message replacing the attachment. DO NOT EDIT OTHER LINES unless you are fully understanding how the script works. Especially line 50, containing '$tempdir' again MUST NOT BE CHANGED. That dir gets 'rm -rf'd in the end. You don't want this to happen to your root dir, do you ? For debug purposes I use to compose a message containing a virus and start the script from command line, with the filename as an argument. Within some harmless directory, of course. This way you can read all messages the script returns (if any) and inspect the changed message file. looking forward to solving your problem, Goesta -- Composed with Pegasus Mail v4.01 - the /dev/null for worms take a look: http://www.pmail.com - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
