I assume you are getting an AV.log file generated?

The follow steps MUST happen to have the system give a 554 error without an
infected file/virus name...

1) It found the email
2) It could read the email
3) It found the antivirus program
4) FOR F-PROT FOR DOS ONLY --> Creates a file called "scan.bat" in the
antivirus folder.
5) It ran the antivirus program (scan.bat in F-PROT FOR DOS)
6) The antivirus and/or batch file returned an exit code > 0 within 15
seconds.
7) It could either NOT find the report file, could not read the report file
or not identify the virus name in the report file.

I will add some additional debug code for you and release a new version that
should give you more information.

Look for it later today/tonight.
------------------------------------------------------------
Jason J Ellingson
Sr. Web Software Developer

615.301.1682 : nashville
612.605.1132 : minneapolis

www.ellingson.com
[EMAIL PROTECTED]

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Javier Navarro
Sent: Thursday, February 10, 2005 5:06 AM
To: [email protected]
Subject: [xmail] Antivirus filter & .NET updates

  Hi
  We have been using XMail 1.20 on a fully patched W2K Server with last
version of Jason J Ellingson's .NET antivirus filter + F-Prot for DOS for
several weeks with no problems.

  Now we are having "554 Transaction failed" errors since last Microsoft
..NET update
(http://www.microsoft.com/technet/security/bulletin/ms05-004.mspx).

  This error msg doesn't include a virus name or infected file.

  SMTP log file contains lines with "DATA=EFILTER" and errors disappear once
the filter is disabled.

  On the other hand, we have other XMail server with the same configuration
and no erros have been detected.

  Any ideas?
  
  Javier Navarro


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to