Andrew van Tilburg wrote:

Hi again Jason, thanks for your response. See below for the log results and
header for an email that looks to me as if it should't have been
quarantined. Any ideas on the reason ? Note that the subject and email
address are not in the quarantine-attachments.txt file. I've attached the
email using ms outlook if that's any help.

As you suggested, I have reinstalled Qmail-Scanner with logging on as
follows :

./configure --scanners fast_spamassassin=#####SPAM#### --notify
none --fix-mime yes --ignore-eol-check yes --unzip yes --log-details
syslog --install

Then from /var/log/maillog I picked out one entry that related to a message
that looks like it shouldn't have been quarantined.
...snip...
Perlscan::RC:0(207.155.248.71):SA:0(0.6/5.0): 0.737186 5027

there's a clue - "Perlscan::RC:0...." ----------^ missing virus desc

maybe there's some malformed entry (missing tab?) in you quarantine-attachments.txt file? Proper format is:

# Format: three columns
# filename<TAB>size (in bytes)<TAB>Description of virus/whatever
# OR:
# string<TAB>Header<TAB>Description of virus/whatever

Why don't you pass along your quarantine-attachments.txt file for review.




------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to