List Info

Thread: amavisd-new no detect virus




amavisd-new no detect virus
user name
2007-03-30 19:26:51
hello list, I have seen that since it installs the mail
server, about
3 months ago, alone had detected 4 virus that I found
strange, I put
on to check the amavisd-new and all I find it well, checkup
the maia
and I have activated the option that scan the virus for my
domain and
for the domain for default is activate  , I make a test of
virus eicar
and he says that this clean one

log of amavisd-new

 ns1 amavis[30839]: (30839-03-3) Passed CLEAN,
[205.188.157.38]
[200.62.117.158] <gutierrezr5netscape.net> ->
<soporteaglobal.org.ni>, Message-ID:
<8C94142245860FB-1104-300Cmblk-r29.sysops.aol.com>, Hits: 4.136, 1564
ms
Mar 30 16:21:04 ns1 amavis[30839]: (30839-03-3) TIMING
[total 1569 ms]
- lookup_sql: 4 (0%), SMTP pre-DATA-flush: 2 (0%), SMTP
DATA: 35 (2%),
body_hash: 1 (0%), maia_connect: 2 (0%),
maia_read_system_config: 1
(0%), maia_get_mysql_size_limit: 0 (0%), lookup_sql: 2
(0%),
mime_decode: 13 (1%), get-file-type2: 14 (1%),
decompose_part: 1 (0%),
parts_decode: 0 (0%), AV-scan-1: 15 (1%), lookup_sql: 2
(0%),
lookup_sql: 1 (0%), spam-wb-list: 1 (0%), SA msg read: 0
(0%), SA
parse: 2 (0%), SA check: 1364 (87%), update_cache: 1 (0%),
maia_store_mail: 11 (1%), deal_with_mail_size: 2 (0%),
maia_record_tests: 20 (1%), maia_set_mail_status: 3 (0%),
fwd-connect:
6 (0%), fwd-mail-from: 1 (0%), fwd-rcpt-to: 2 (0%),
write-header: 3
(0%), fwd-data: 0 (0%), fwd-data-end: 44 (3%), fwd-rundown:
1 (0%),
main_log_entry: 12 (1%), update_snmp: 1 (0%), maia_cleanup:
1 (0%),
maia_disconnect: 0 (0%), unlink-2-files: 1 (0%), rundown: 0
(0%)

thank you for the possible answers

richard g
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: amavisd-new no detect virus
country flaguser name
United States
2007-03-30 21:58:00
>hello list, I have seen that since it installs the mail
server, about
>3 months ago, alone had detected 4 virus that I found
strange, I put
>on to check the amavisd-new and all I find it well,
checkup the maia
>and I have activated the option that scan the virus for
my domain and
>for the domain for default is activate  , I make a test
of virus eicar
>and he says that this clean one
>
>log of amavisd-new
>
>  ns1 amavis[30839]: (30839-03-3) Passed CLEAN,
[205.188.157.38]

>thank you for the possible answers
>
>richard g

I have seen where clamav will sometimes not detect a virus
in the eicar.com 
file when it is inside the zipped file. Also, if you test
using the eicar 
string in the body of a message, the text must have
absolutely no white 
space in front of it, and ideally is the only thing in the
message. 
Personally, I test using the eicar.com.txt file renamed to
eicar.txt and 
then sent as an attachment. I get the most consistent
results that way.

Gary V

____________________________________________________________
_____
Exercise your brain! Try Flexicon. 
http://games.msn.com/en/flexicon
/default.htm?icid=flexicon_hmemailtaglinemarch07

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: amavisd-new no detect virus
user name
2007-03-31 00:37:58
2007/3/30, Gary V <mr88talenthotmail.com>:

 > I have seen where clamav will sometimes not detect a
virus in the eicar.com
> file when it is inside the zipped file. Also, if you
test using the eicar
> string in the body of a message, the text must have
absolutely no white
> space in front of it, and ideally is the only thing in
the message.
> Personally, I test using the eicar.com.txt file renamed
to eicar.txt and
> then sent as an attachment. I get the most consistent
results that way.
>
> Gary V
>
I made tests and amavisd-new it detects the eicar like
attach, but
when I copy and paste the it lines of eicar in the message
it doesn't
detect it , where I can make other virus tests? , the
strange thing is
that I have 3 months of tenes maia 1.0.1, and single 4 virus
has
detected!!!

any idea?

thank list
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )