Server: Suse 10.3
Domino: 7.03
VirusScanner: AntiVir from avira (rpm from suse)
MailScan seems to start correct, here you will find the mailscan.log, but when a mail with an attachment arrives nothing happen.
no entry at the console, nothing in the logfile, no error when receiving the eicar file.
nothing like kspam is running, only spamassassin integration from this site.
30.11.2007 12:25:29: Startup……
30.11.2007 12:25:29:
30.11.2007 12:25:29: PID>1115
30.11.2007 12:25:29: OpenMailScan Version 1.0b, Copyright © 2004 Hans-Georg Franke
30.11.2007 12:25:29: OpenMailScan comes with ABSOLUTELY NO WARRANTY;
30.11.2007 12:25:29: This is free software, and you are welcome to redistribute it under certain conditions;
30.11.2007 12:25:29: For details see included file "license.txt"
30.11.2007 12:25:29: MAXPATH=256
30.11.2007 12:25:29: DebugLevel: 3
30.11.2007 12:25:29: Creating messagequeue
30.11.2007 12:25:29: Using configdb: "domino/rupitz!!virconf.nsf"
30.11.2007 12:25:32: Calling scanner with "/usr/bin/antivir"
30.11.2007 12:25:32: Calling with Param "-q [DIRECTROY]\"
30.11.2007 12:25:32: Working directory MailScan
30.11.2007 12:25:32: Report to 0
30.11.2007 12:25:32: Sending mail with from-address: "MailScan-System"
30.11.2007 12:25:32: Sending mail with from-subject: "VIRUS*"
30.11.2007 12:25:32: Sending mail-body read
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode0: 0 - Text: "(Virusscanned by me)"
30.11.2007 12:25:32: Handling before0: 0
30.11.2007 12:25:32: Deleting file with rc0: 0
30.11.2007 12:25:32: Replacing text for rc0: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc0: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc0: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode1: 1 - Text: "Found concerning file or boot sector"
30.11.2007 12:25:32: Handling before1: 1
30.11.2007 12:25:32: Deleting file with rc1: 1
30.11.2007 12:25:32: Replacing text for rc1: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc1: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc1: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode2: 2 - Text: "An alert was found in memory"
30.11.2007 12:25:32: Handling before2: 1
30.11.2007 12:25:32: Deleting file with rc2: 1
30.11.2007 12:25:32: Replacing text for rc2: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc2: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc2: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode3: 3 - Text: "(VIRUS FOUND)"
30.11.2007 12:25:32: Handling before3: 1
30.11.2007 12:25:32: Deleting file with rc3: 1
30.11.2007 12:25:32: Replacing text for rc3: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc3: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc3: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode4: 4 - Text: "not set"
30.11.2007 12:25:32: Handling before4: 1
30.11.2007 12:25:32: Deleting file with rc4: 1
30.11.2007 12:25:32: Replacing text for rc4: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc4: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc4: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode5: 5 - Text: "not set"
30.11.2007 12:25:32: Handling before5: 1
30.11.2007 12:25:32: Deleting file with rc5: 1
30.11.2007 12:25:32: Replacing text for rc5: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc5: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc5: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode6: 6 - Text: "not set"
30.11.2007 12:25:32: Handling before6: 1
30.11.2007 12:25:32: Deleting file with rc6: 1
30.11.2007 12:25:32: Replacing text for rc6: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc6: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc6: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode7: 7 - Text: "not set"
30.11.2007 12:25:32: Handling before7: 1
30.11.2007 12:25:32: Deleting file with rc7: 1
30.11.2007 12:25:32: Replacing text for rc7: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc7: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc7: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: ReturnCode8: 8 - Text: "not set"
30.11.2007 12:25:32: Handling before8: 1
30.11.2007 12:25:32: Deleting file with rc8: 1
30.11.2007 12:25:32: Replacing text for rc8: Suspicous attachment removed:
30.11.2007 12:25:32: Send mail for rc8: noone@nowhere
30.11.2007 12:25:32: Send mail to originator for rc8: 0
30.11.2007 12:25:32: ———————-
30.11.2007 12:25:32: Other Configuration Error: "(ERROR OCCURED scanning for viruses)"
30.11.2007 12:25:32: Send mail to originator for other config error: 0
30.11.2007 12:25:32: Initialization complete.
30.11.2007 12:25:32: Searching for Mailboxes.
30.11.2007 12:25:32: No Multiple Mailboxes.
30.11.2007 12:25:32: Startup completed.