anyone have any suggestions??? thanks On Tue, 6 Jul 2004 17:06 , McKeever Chris <[EMAIL PROTECTED]> sent:
> > >On Tue, 06 Jul 2004 12:58:34 , McKeever Chris [EMAIL PROTECTED]> sent: > >>If I turn off any of the DISALLOWABLE extensions, clamscan comes up dry with finding >>viruses, it then gets passed to the internal mail >server >>and the virus is found. >> >>qmail-scanner 1.22 >>clamscan .74 >> >>any suggestions?? > > >here is the latest log with a miss (this email was flagged as a virus on the internal >mailserver running clamscan) >now it says "it is a password-protected zip file", however clamscan on the internal >machine catches and flags it...any ideas?? thanks > > >Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: Check for zip files... >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: potential zip archive file found >(Loves_money.zip). >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is possibly a zip file, run unzip >-Pxx1855417069xx -t /var/spool/qmailscan/tmp/prupref- >mailgate10891502154791319/Loves_money.zip >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: it is a password-protected zip file >Tue, 06 Jul 2004 16:43:36 CDT:1319: u_f: run /usr/bin/unzip -Pxx1855417069xx -oj >/var/spool/qmailscan/tmp/prupref- >mailgate10891502154791319/Loves_money.zip 2>&1 >Tue, 06 Jul 2004 16:43:36 CDT:1319: d_m: unpacking message took 0.061506 seconds >Tue, 06 Jul 2004 16:43:36 CDT:1319: unsetting QMAILQUEUE env var >Tue, 06 Jul 2004 16:43:36 CDT:1319: g_e_h: return-path is "[EMAIL PROTECTED]", recips >is "[EMAIL PROTECTED]" >Tue, 06 Jul 2004 16:43:36 CDT:1319: from="Mmurray" [EMAIL PROTECTED]>,subj=RE: >Protected message, x-qmail-scanner- >[EMAIL PROTECTED]> via SMTP from 64.108.213.83 >Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: start scanning >Tue, 06 Jul 2004 16:43:36 CDT:1319: ini_sc: recursively scan the directory >/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319/ >Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: starting scan of directory >"/var/spool/qmailscan/tmp/prupref- mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:36 CDT:1319: scanloop: >scanner=clamscan_scanner,plain_text_msg=0 >Tue, 06 Jul 2004 16:43:36 CDT:1319: clamscan: starting scan of directory >"/var/spool/qmailscan/tmp/prupref- mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:36 CDT:1319: run /usr/local/bin/clamscan -r -m --unzip --unrar >--unzoo --lha --disable-summary --max-recursion=10 -- >max-space=100000 /var/spool/qmailscan/tmp/prupref-mailgate10891502154791319 2>&1 >Tue, 06 Jul 2004 16:43:37 CDT:1319: --output of clamscan was: >-- >Tue, 06 Jul 2004 16:43:37 CDT:1319: clamscan: finished scan of dir >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319" in >1.157789 secs >Tue, 06 Jul 2004 16:43:37 CDT:1319: scanloop: finished scan of >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... >Tue, 06 Jul 2004 16:43:37 CDT:1319: p_s: starting scan of directory >"/var/spool/qmailscan/tmp/prupref-mailgate10891502154791319"... > > > > > > > > > > > > > > >> >>------------------------------------------- >>Chris McKeever >>If you want to reply directly to me, please use cgmckeever--at--prupref.com >>http://www.prupref.com";>Prudential href="http://www.prupref.com";>Chicago Real Estate >> >> >> >>---- Prudential Preferred Properties www.prupref.com >>Success Driven By Results >> Results Driven By Commitment >> Commitment Driven By Integrity >> We Are Prudential Preferred Properties >> > > > >---- Prudential Preferred Properties www.prupref.com >Success Driven By Results > Results Driven By Commitment > Commitment Driven By Integrity > We Are Prudential Preferred Properties > >†+×zf¢–ÊhžÊ+yÖòVœv¸ž~)à±:ÚŠx§€ mzwA•§$ «A®'ŸŠx,N¶¢ž)à-«z¬&érÛ½v ("µ©lzWÝy÷§±ëh¦×œ†xœjW±¥êí²z/zwh®˜r¬ºyšµÈ^vwŠäŠx(¦š+¶éâ¶'¬V+"· 0nVœ’r‰™¨¥±Æ§êàzw«jYšŠX§‚X¬µ šŠ [ jyÞ®§z¶¥–+-²Ê.ÇŸ¢¸ ëa¶Úlÿùb²Û,¢êÜyú+éÞ·ùb²Û?–+-Šwèþ©šŠ[ jyÞ®§z¶¥ ---- Prudential Preferred Properties www.prupref.com Success Driven By Results Results Driven By Commitment Commitment Driven By Integrity We Are Prudential Preferred Properties
