Let me clarify...having read some other posts on this list...the messages
that are getting through are NOT bounces....also, I have only ever caught
the Mydoom.A (Worm.SCO.A) variant....anyone else seen much in the way of
email-borne Mydoom.B or Myjuice variants?



-----Original Message-----
From: Michael Menefee [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 11, 2004 7:50 PM
To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
Subject: RE: [Qmail-scanner-general]Mydoom/Worm.SCO


latest stable is 0.65, I thought. I will research the issue, but what does
clamav have to do with the bounces? This seems more like a message-handling
process like Q-S or qmail-queue....the contents of the message either
contain a virus or they don't


-----Original Message-----
From: russ [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 11, 2004 6:25 PM
To: [EMAIL PROTECTED]
Subject: Re: [Qmail-scanner-general]Mydoom/Worm.SCO


On Wed, 2004-02-11 at 16:03, Michael Menefee wrote:

> 
> I can see that qmail-scanner and clamav are quarantining the
> mydoom/Worm.SCO.A, however the A/V on my exchange keeps picking it up and
my
> IDS box is showing my Q-S box sending the Mydoom virus to my exchange
> server. 
> 
> Has anyone had a problem with this slipping through? 

It may be sneaking through in bounce messages.  Upgrade to ClamAv 0.66
and it will catch the bounces as well.

-- 
Russel Oliver
[EMAIL PROTECTED]



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.581 / Virus Database: 368 - Release Date: 2/9/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.581 / Virus Database: 368 - Release Date: 2/9/2004
 


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.581 / Virus Database: 368 - Release Date: 2/9/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.581 / Virus Database: 368 - Release Date: 2/9/2004
 


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to