On 2 Dec 2007, at 21:46, David Lord wrote:

> Anyone using fprot with xmail?
> 
> My main server has given a couple of empty messages that a virus has 
> been found but no details and that was last week but it crashed last 
> week then earlier today.

I've now manually run fprot on the most recent saved 'infected' 
message but it scans as clean.

I'm suspecting a problem in the scripts or xmail maybe caused as
system time was stepped before ntpd was restarted after the crash.  

> Today my test server al;so crashed after uptime of 200+ days and on 
> restart I find multiple instances of XMail then see spool file is 
> full of (179174 of them) messages: Subject: Identified virus! all 
> dated from Dec 1.

The message that initially caused the problem was the email sent with 
output from daily security check on Dec 1. I've now found a possible 
misconfiguration of the spamd flags in rc.conf on the test server.

Sorry for the noise.

David

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to