[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] F-prot config question

At 06:28 PM 8/7/2003, you wrote:


----- Original Message -----
From: "Jorge Ceballos" <jorge@xxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, August 07, 2003 4:24 PM
Subject: [cobalt-users] F-prot config question


>
> Hi everyone,
>
> I´m using Bassi's MailScanner pkg(thanks Bassi) which uses f-prot in a
> RaQ4i.
> (FYI. I update virus def running '/home/local/f-prot/autoupdate' twice a
> week, instead of 'check-updates.sh'.)
>
> This week some customers have started receiving zipped attachments with
> viruses and worms in them and f-prot doesn´t scan zipped files.
>
> How can I have f-prot scan zipped attachments ?
> There's this funcion '/usr/local/bin/f-prot -archive' to scan zipped
> attachments on demand, but doesn't stay configured to keep doing it.
>
> Any ideas anyone ?
>
> TIA
>
> Jorge Ceballos
> Mexico City
>

I use RAQ4-Bassi-MailScannerRelease 3.21-1 and I'm pretty sure it has
detected viruses in zip files before. I tested it today with the
eicar_com2.zip download and it removed the attachment and warned me. I
didn't edit any config files or update the program. The only updates I get
are the definitions. Isn't it actually MailScanner that scans the files?

Rich
EBS


mailscanner looks at the files and allows attachments of certain types through
the virus scanner (f-prot) as we are speaking, does not seem to find the w32.mimail.a virus in the attachment message.zip you can modify the as I detailed earlier or you can download the newest version of the software, apparently the definitions are not enough. But, the Bassi package does scan zip files but it does not catch the one mentioned. 



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.