ote:
>>
>> Darley Ware wrote:
>> >
>> > Hello,
>> >
>> > I want to use the quarantine-attachments feature to block the new
>> E-Card marketing worm from FriendGreetings.com.
>> >
>> > http://www.sophos.com/virusinfo/articles/
Hello,
I want to use the quarantine-attachments feature to block the new E-Card
marketing worm from FriendGreetings.com.
http://www.sophos.com/virusinfo/articles/greetings.html
My question is can I block messages from an entire domain? I tried the
following but it did not work...
.*friendgreeti
Does any one know if this fix has been noted for the next release?
Darley
--
PGP Key: www.thewares.net/drware.asc
Dulce bellum inexpertis ("War is delightful to those who have no
experience of it.") --Erasmus
Darley Ware said:
> Yeah, I reported this issue a while back. I act
Yeah, I reported this issue a while back. I actually changed with HBEDV
6.15...
A temporary fix is to change the following in qmail-scanner-queue.pl from:
if ($DD =~ /(Virus.*)\n/) {
$quarantine_description=$1;
To:
if ($DD =~ /(ALERT.*)\n/) {
$quarantine_description=$1;
Hello,
I got a hit from the tanatos virus this morning using qmail-scanner and
HBDEV Antivir.
Syslog:
ALERT: [Worm/Tanatos.1 virus]
/var/spool/qmailscan/runway10103373813142430714/eickert.ppt.pif <<<
Contains signature of the worm Worm/Tanatos.1
I want to modify qmail-scanner to not send notifi
/var/qmail/bin/qmail-scanner-queue.pl -z
You need to run the above command. This will rebuild the
qmail-scanner-queue.txt file which stores the antivirus version
information. I believe the command also cleans up unprocessed files. I
run it via cron every night.
~Darley
Daniel Czarnecki said:
Here is what the "antivir --version" command returns for me...
6.14.0.1
operating system: OpenBSD
product version: 2.0.3
engine version: 6.14.0.1
packlib version: 2.0.0.3 (supports 18 formats)
vdf version: 6.14.0.19 (66882 known viruses)
product: AntiVir Server
key file:
I noticed a while back that qmail-scanner-queue was adding a huge header
to my email messages. After help for them the list I was able to track
down the problem. Apparently H+BEDV AntiVir had changed the output from
the "antivir --version" command. This output is used to generate the
qmail-scan
You need to make sure you have installed the QMAILQUEUE patch for
qmail-1.03 so qmail-scanner-queue.pl can intercept the messages.
See:
http://qmail-scanner.sourceforge.net/
http://www.lifewithqmail.org/lwq.html#patches
Then you need to modify the /var/qmail/supervise/qmail-smtpd/run file
descri
When I ran the "antivir --version" I got a whole page full of text. So
this is where my problem is coming from. I believe that HBEDV has change
what is ouput by the "antivir --version" in their latest release. This is
my belief because this is a new problem for me and I have recently update
th
I use "H+BEDV's antivir scanner: OpenBSD Version 2.0.3" for virus
scanning. When I run the command "qmail-scanner-queue.pl -z" where does
qmail-scanner get the information to generate the
qmail-scanner-queue-version.txt?
Does anyone know?
Thanks,
Darley
Darley War
etup
OpenBSD 3.1
qmail 1.03 patched with tls, mfscheck, and of course QMAILQUEUE
qmail-scanner-1.13
H+BEDV's antivir scanner: OpenBSD Version 2.0.3
Thanks you for the help!
Darley Ware
---
This sf.net email is sponsored by: Ja
12 matches
Mail list logo
