Well now it's finding it on all 3 of my mail servers when I checked this morning. It's almost like there is a lag between when the database updates and when qmail-scanner and clamdscan find it.
My softlimit is set to... let me check here.. exec /usr/local/bin/softlimit -m 15000000 I believe it did this with the SCO virus too... I updated it and it lagged slightly behind... I even tried restarting clamd.. Any ideas? I had a copy of netsky (somefool) that I was e-mailing to myself and it wasn't being caught. If I stuck it in a directory on the mail server and had clamscan scan it it finds it. Is it possible that in some wierd way maybe when the mailserver downloaded the definitions overnight (as opposed to me doing a force yesterday afternoon when the virus came out) there was a more indepth signature that found it in the e-mail? But I still don't understand why it wouldn't have found it otherwise.. any thoughts. On Wed, 2004-02-18 at 16:53, Jason Staudenmayer wrote: > Softlimit? What's clam-av return in the debug log? > > -----Original Message----- > From: Matt [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 18, 2004 4:28 PM > To: [EMAIL PROTECTED] > Subject: [Qmail-scanner-general]ClamAV and Qmail-Scanner > > > Greetings, > I have clamav installed and have it all up2date. If I stick a copy of > netsky (somefool) into a directory and tell clamav to scan it it finds > the virus. > > Yet for some reason it is letting it get through on e-mail. Any ideas > on this? > > It is catching other viruses in e-mail like SCO and Klez. > > ` Matt > > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general -- Matt <[EMAIL PROTECTED]> ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
