Hi, I use clamav-0.75.1-1 but if I send a virus with extension ".txt",
the message does not come blocked:

(local)
$ echo ciao|mutt -a virus.txt -s con-virus.txt [EMAIL PROTECTED]
(remote-qs-server)
Sep 14 18:10:58 xxx qmail-scanner[13073]: Clear:RC:0(8.6.1.2): 0.673113
82113 [EMAIL PROTECTED] [EMAIL PROTECTED] con-virus.txt
<[EMAIL PROTECTED]> 1095178258.13077-0.xxxx.xxxxxxx.it:5
orig-xxx.xxxxx.it109517825848213073:82113 virus.txt:30404

instead if i send the same virus with other extension (ex. ".abc" or
".pif") this the message is blocked correctly.

(local)
$ echo ciao|mutt -a virus.abc -s con-virus.abc [EMAIL PROTECTED]
(remote-qs-server)
Sep 14 18:11:11 xxxx qmail-scanner[13122]:
CLAMDSCAN:Worm.SomeFool.Gen-1:RC:0(81.116.144.202): 0.355005 24685
[EMAIL PROTECTED] [EMAIL PROTECTED] con-virus.abc
<[EMAIL PROTECTED]> virus.abc

This is a local files check:

$ clamscan virus.*
virus.abc: Worm.SomeFool.Gen-1 FOUND
virus.txt: Worm.SomeFool.Gen-1 FOUND
 
----------- SCAN SUMMARY -----------
Known viruses: 23869
Scanned directories: 0
Scanned files: 2
Infected files: 2
Data scanned: 0.05 MB
I/O buffer size: 131072 bytes
Time: 1.431 sec (0 m 1 s)

This is my QS 1.23 setting:

# ./configure --spooldir /var/spool/qmailscan --qmaildir /var/qmail
--bindir /var/qmail/bin --qmail-queue-binary /var/qmail/bin/qmail-queue 
--admin virusadmin --domain csansaldi.it --notify psender,nmlvadm
--local-domains xxxxx.it --silent-viruses auto --lang it_IT --debug no
--unzip 0 --block-password-protected 1 --add-dscr-hdrs 0 --archive 0
--redundant yes --log-details syslog --log-crypto 0 --fix-mime 2 
--ignore-eol-check 0 --scanners "auto" --install 1

Is this correct?
I must set this switch?
  --skip-text-msgs [yes|no]          Defaults to "yes" - Q-S will skip
                                     running any anti-virus scanners on
                                     any messages it works out are text-only.
                                     i.e. don't have any attachments.
                                     Set to "no" if you want them to be scanned
                                     anyway.

....but my message have an attachments!

Please, tell me some suggest, and sorry for my bad english

Many Thanks

-- 
Dario Lesca <[EMAIL PROTECTED]>



-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to