At 10:07 +0200 21-05-2005, Nikodemus Karlsson wrote:
Hi,
when I run the testinstallation.sh script, the EICAR test signature
is detected as virus of clamd anti virus program invoked from
qmailscanner. The mail doesn't reach root and is not reported, but I
find the "virus" in quarantine.
But the eicar.com attachment (name of attachment *without* test
signature) is not caught by qmailscanner's perlscan (nor by clamd,
of course). According to the docs it is expected to be caught of
perlscan as a suspected virus. I run qmailscanner 1.25 on a gentoo
box.
The relevant headers are:
Received: (qmail 16500 invoked by uid 89); 21 May 2005 09:07:48 +0200
Received: (qmail 16491 invoked by uid 0); 21 May 2005 09:07:48 +0200
Received: from 127.0.0.1 by jupiter (envelope-from <>, uid
0) with qmail-scanner-1.25st (clamdscan: 0.83/888. spamassassin:
3.0.2. perlscan: 1.25st. Clear:RC:1(127.0.0.1):SA:0(-1.8/6.0):.
Processed in 0.117782 secs); 21 May 2005 07:07:48 -0000
X-Spam-Status: No, hits=-1.8 required=6.0
X-Qmail-Scanner-Mail-From: via jupiter
X-Qmail-Scanner: 1.25st
(Clear:RC:1(127.0.0.1):SA:0(-1.8/6.0):. Processed in 0.117782 secs
Process 16476)
Am I missing someyhing?
Have you uncomment the rule for '.com' attachment in
quarantine-attachments.txt and rebuild the database?
ST
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
