Darko Cabro wrote:
> Have seen that someone already had this kind of issue...
> Using q-s with clamav and the only mail which passes without scanning
> is  infected with sober.. So any fixes so far? Or still on hold?
> Thanks a bunch.
>

The message headers you show didn't go through Qmail-Scanner - that's
why it wasn't caught. Every message that goes through gets an extra
Received: header with information about what Qmail-Scanner did.

Your tcp.smtp file looks correct - so did you run "maketcprules" after
editing it? Qmail uses the CDB version of that file - not the text version.

Also, I am assuming /etc/tcp.smtp is the correct directory on your
system - it's /etc/tcpcontrol/smtp.rules on mine. It's totally up to how
you installed it on your system of course.


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to