[Qmail-scanner-general]problem with I-Worm/Mimail

2003-11-20 Thread webmaster
I am using QS-1.0.26 with f-prot (Program version: 4.1.1 Engine version: 3.13.3) It keeps on failing to detect I-Worm/Mimail message.zip file. I don't have it defined in quarantine-attachments.txt hoping that f-prot would just pick it up. Anyone know why it cannot detect such a well known virus

[Qmail-scanner-general]Interpreting debug info: "recips is"

2003-11-20 Thread Dennis Duval
I'm trying to track down and quash some Rumplestiltskin attacks and something I see in the debugging log for qmail-scanner is puzzling me. I see for some emails that the recipient info looks something like this in the debug log: recips is " [EMAIL PROTECTED] , [EMAIL PROTECTED], [EMAIL PROTECTED]

[Qmail-scanner-general]integration with getmail

2003-11-20 Thread Samuel Murez
Hello-- I really can't figure this out. How does one use Charles Cazabon's getmail with qmail-scanner ? what does one put in .getmailrc in "local" and postmaster" ? this is for basic pop3 accounts. http://www.qcc.ca/~charlesc/software/getmail-3.0/ thanks for your help, --sam --

[Qmail-scanner-general]qs2mrtg.pl question (stupid)

2003-11-20 Thread Lombardo Federico
This script works only is QS logs to syslogd ? so I MUST set: my $log_details="1" to log to syslogd ? and... what about the development of QSS 3 ? Thanks in advance. Federico --- This SF.net email is sponsored by: SF.net Giveback Program

[Qmail-scanner-general]Bugreport: "--archive no" does not work as proposed

2003-11-20 Thread Alex Pleiner
Hi, there is a small bug in qmail-scanner 1.20 that occurs if you install it with "--archive no". While "configure --help" says: --archive [yes|no|regex] Defaults to "no". Whether to archive mail after it as been processed. If "yes", all copies of

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Salvatore Toribio
Doug Monroe wrote: Salvatore Toribio wrote: I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" a

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Ron Culler
Trey, Your correct by using the name+extension with 0 you are requiring an exact match. We used the exact line in our scanners yesterday for the same virus. We still allow zip files to be scanned unless they are an exact match for that excluded name. On Thu, 2003-11-20 at 09:08, Trey Nolen wr

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Trey Nolen
I believe you CAN combine the "two types." We have done it before. Using 0 for the bytes matches that filename on any size file. Trey Nolen > Salvatore Toribio wrote: > > > I've received this report from Sophos > > > > Troj/Tofger-A may arrive attached to an email as a password protected > > Z

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Doug Monroe
Salvatore Toribio wrote: I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" and an attached file

[Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Salvatore Toribio
Title: Troj/Tofger-A I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" and an attached file named