On Tue, 06 Jul 2004 12:58:34 , McKeever Chris <[EMAIL PROTECTED]> sent:
>If I turn off any of the DISALLOWABLE extensions, clamscan comes up dry with finding >viruses, it then gets passed to the internal mail server >and the virus is found. > >qmail-scanner 1.22 >clamscan .74 > >any suggestions?? here is the latest log with a miss (this email was flagged as a virus on the internal mailserver running clamscan) now it says "it is a password-protected zip file", however clamscan on the internal machine catches and flags it...any ideas?? thanks Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: Check for zip files... Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: potential zip archive file found (Loves_money.zip). Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is possibly a zip file, run unzip -Pxx1855417069xx -t /var/spool/qmailscan/tmp/prupref- mailgate10891502154791319/Loves_money.zip Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is a password-protected zip file Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: run /usr/bin/unzip -Pxx1855417069xx -oj /var/spool/qmailscan/tmp/prupref- mailgate10891502154791319/Loves_money.zip 2>&1 Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: unpacking message took 0.061506 seconds Tue, 06 Jul 2004 16:43:36 CDT:1319: unsetting QMAILQUEUE env var Tue, 06 Jul 2004 16:43:36 CDT:1319: g_e_h: return-path is "[EMAIL PROTECTED]", recips is "[EMAIL PROTECTED]" Tue, 06 Jul 2004 16:43:36 CDT:1319: from="Mmurray" <[EMAIL PROTECTED]>,subj=RE: Protected message, x-qmail-scanner- message-id=<[EMAIL PROTECTED]> via SMTP from 64.108.213.83 Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: start scanning Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/prupref-mailgate10891502154791319/ Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: scanner=clamscan_scanner,plain_text_msg=0 Tue, 06 Jul 2004 16:43:36 CDT:1319: clamscan: starting scan of directory "/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... Tue, 06 Jul 2004 16:43:36 CDT:1319: run /usr/local/bin/clamscan -r -m --unzip --unrar --unzoo --lha --disable-summary --max-recursion=10 -- max-space=100000 /var/spool/qmailscan/tmp/prupref-mailgate10891502154791319 2>&1 Tue, 06 Jul 2004 16:43:37 CDT:1319: --output of clamscan was: -- Tue, 06 Jul 2004 16:43:37 CDT:1319: clamscan: finished scan of dir "/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319" in 1.157789 secs Tue, 06 Jul 2004 16:43:37 CDT:1319: scanloop: finished scan of "/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... Tue, 06 Jul 2004 16:43:37 CDT:1319: p_s: starting scan of directory "/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... > >------------------------------------------- >Chris McKeever >If you want to reply directly to me, please use cgmckeever--at--prupref.com >http://www.prupref.com";>Prudential href="http://www.prupref.com";>Chicago Real Estate > > > >---- Prudential Preferred Properties www.prupref.com >Success Driven By Results > Results Driven By Commitment > Commitment Driven By Integrity > We Are Prudential Preferred Properties > ---- Prudential Preferred Properties www.prupref.com Success Driven By Results Results Driven By Commitment Commitment Driven By Integrity We Are Prudential Preferred Properties
