Hi Jason

I finally found the problem.

AV log file was generated but it was empty. I executed scan.bat and F-Prot=
 said that macro definitions file was corrupt. So that was the problem. AV=
 filter took this exit code as an infected e-mail. I updated F-Prot and=
 everyting works fine now.

Thanks for your help

Javier Navarro


*************** Mensaje original  ***************

El d=EDa 10/02/2005 a las 7:58 Jason J. Ellingson escribi=F3:

>I assume you are getting an AV.log file generated?
>
>The follow steps MUST happen to have the system give a 554 error without=
 an
>infected file/virus name...
>
>1) It found the email
>2) It could read the email
>3) It found the antivirus program
>4) FOR F-PROT FOR DOS ONLY --> Creates a file called "scan.bat" in the
>antivirus folder.
>5) It ran the antivirus program (scan.bat in F-PROT FOR DOS)
>6) The antivirus and/or batch file returned an exit code > 0 within 15
>seconds.
>7) It could either NOT find the report file, could not read the report=
 file
>or not identify the virus name in the report file.
>
>I will add some additional debug code for you and release a new version
>that
>should give you more information.
>
>Look for it later today/tonight.
>------------------------------------------------------------
>Jason J Ellingson
>Sr. Web Software Developer
>
>615.301.1682 : nashville
>612.605.1132 : minneapolis
>
>www.ellingson.com
>[EMAIL PROTECTED]
>
>-----Original Message-----
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 On
>Behalf Of Javier Navarro
>Sent: Thursday, February 10, 2005 5:06 AM
>To: [email protected]
>Subject: [xmail] Antivirus filter & .NET updates
>
>  Hi
>  We have been using XMail 1.20 on a fully patched W2K Server with last
>version of Jason J Ellingson's .NET antivirus filter + F-Prot for DOS for
>several weeks with no problems.
>
>  Now we are having "554 Transaction failed" errors since last Microsoft
>..NET update
>(http://www.microsoft.com/technet/security/bulletin/ms05-004.mspx).
>
>  This error msg doesn't include a virus name or infected file.
>
>  SMTP log file contains lines with "DATA=3DEFILTER" and errors disappear
>once
>the filter is disabled.
>
>  On the other hand, we have other XMail server with the same=
 configuration
>and no erros have been detected.
>
>  Any ideas?
>  
>  Javier Navarro
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]


*********** Fin del mensaje original  ***********

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to