IBM Lotus Domino server enhancement for scanning mail attachments for viruses
Hi, we're using f-prot 3.16f and MailScan 1.0b. But MailScan didn't recognize the eicar.com virus. 3.10.2006 22:48:16: Found 1 Attachment 03.10.2006 22:48:16: Scanning Attachment 03.10.2006 22:48:16: length of szFileName: 9 03.10.2006 22:48:16: Filename before: eicar.com 03.10.2006 22:48:16: Starting while 03.10.2006 22:48:16: Filename_lower eicar.com 03.10.2006 22:48:16: BLOCKID ASCII not found for 03.10.2006 22:48:16: Filename eicar.com 03.10.2006 22:48:16: Creating Directory D:\Lotus\Domino\data\MailScan\18402 03.10.2006 22:48:16: Cleaning directory D:\Lotus\Domino\data\MailScan\18402 03.10.2006 22:48:16: Extracting to D:\Lotus\Domino\data\MailScan\18402\1 from eicar.com 03.10.2006 22:48:16: Starting scanner with command: 03.10.2006 22:48:16: ""D:\Programme\FSI\F-Prot\fpcmd.exe"/AUTO/DISINF/LIST/DUMB/REPORT=report.txt/APPEND "D:\Lotus\Domino\data\MailScan\18402\"" 03.10.2006 22:48:17: Returncode of virusscanner: 00 The Problem is that the Returncode is always 00. When I scan the attachment with following command line the rc is 6: D:\Programme\FSI\F-Prot\fpcmd.exe/AUTO/DISINF/REPORT=report.txt/APPEND Why MailScan didn't recognize the rc? Thanks
Now I could realize the problem. MailScan configuration: comandline: D:\Programme\FSI\F-Prot\fpcmd.exe calling parameters: /AUTO/DISINF/LIST/DUMB/REPORT=report.txt/APPEND Messages mailscan.log: 07.10.2006 11:59:36: Starting scanner with command: 07.10.2006 11:59:36: ""D:\Programme\FSI\F-Prot\fpcmd.exe"/AUTO/DISINF/LIST/DUMB/REPORT=report.txt/APPEND "D:\Lotus\Domino\data\MailScan\18978\"" 07.10.2006 11:59:37: Returncode of virusscanner: 00 Messages report.txt (Report of f-prot) Search: D:\Lotus\Domino\data\MailScan\18602" Action: Automatic disinfection Files: "Dumb" scan of all files Switches:/ARCHIVE/PACKED/SERVER/LIST/REPORT=report.txt/APPEND Memory was not scanned. No viruses were found in MBRs or hard disk boot sectors. Error on scanning D:\Lotus\Domino\data\MailScan\18602" At the end of the last line is a double quote. Because of this f-prot is unable to scan files and return errorlevel 0. How can I troubleshoot this?
I have found the error and correct it. Until the scan file not directoties. Hans-Georg
How can I do this? I found the parameter "Scan Directory/ File" in the documentation. But this parameter does not exists in the configuration applet.
hi, can i send you a fixed version for testing? HansGeorgFranke at yahoo dot de Greetings Hans-Georg