RE: [Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-12 Thread russ
On Thu, 2004-02-12 at 01:36, Martin DiViaio wrote: > > I'm running Q-S 1.20 with ClamAV 0.65 (CLAMD). I also have perlscanner > configured to deny CMD files (which is the type that got through in a zip > file.) You should really ask this question on the Cla

RE: [Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-11 Thread Martin DiViaio
[EMAIL PROTECTED] > X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham > version=2.63 > Subject: RE: [Qmail-scanner-general]Mydoom/Worm.SCO > > Let me clarify...having read some other posts on this list...the messages > that are getting through are

RE: [Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-11 Thread Michael Menefee
: Michael Menefee [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 7:50 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [Qmail-scanner-general]Mydoom/Worm.SCO latest stable is 0.65, I thought. I will research the issue, but what does clamav have to do with the bou

RE: [Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-11 Thread Michael Menefee
ailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 6:25 PM To: [EMAIL PROTECTED] Subject: Re: [Qmail-scanner-general]Mydoom/Worm.SCO On Wed, 2004-02-11 at 16:03, Michael Menefee wrote: > > I can see that qmail-scanner and clamav are quarantining the > mydoom/Worm.SCO.A, however

Re: [Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-11 Thread russ
On Wed, 2004-02-11 at 16:03, Michael Menefee wrote: > > I can see that qmail-scanner and clamav are quarantining the > mydoom/Worm.SCO.A, however the A/V on my exchange keeps picking it up and my > IDS box is showing my Q-S box sending the Mydoom virus to my exchange > server. > > Has anyone ha

[Qmail-scanner-general]Mydoom/Worm.SCO

2004-02-11 Thread Michael Menefee
I have the following configuration: redhat 7.3/qmail/qmail-scanner-1.16/clamav 0.65. This box is setup as an SMTP gateway that then forwards all clean messages to my internal Exchange Server I can see that qmail-scanner and clamav are quarantining the mydoom/Worm.SCO.A, however the A/V on my exch