Problems with sophie/exiscan
Alan Thew <[email protected]> Fri, 22 Oct 2004 13:14:10 +0100 (GMT Daylight Time)
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
I suspect that this is an issue with sophie being unable to handle MIME
structures well enough (unless there's something missing from my
sophie.savi file), Clam seems fine with similar mails but does anyone have
a solution that spots viruses in multi part MIME messages when sophie just
logs it as the following?
Oct 22 10:59:32 xxxxx sophie[18735]: WARNING : Error: The file
passed for scanning represented part of a multi volume archive. The file cannot
be scanned.
I'm using a simple ACL
warn log_message = discarding message with virus $malware_name
demime = *
malware = *
discard demime = *
malware = *
Something like this came up on the sophie list in 2002 but I don't see a
solution posted...
Thanks
p.s. before all of you yell "use CLAM as well", this is under serious
consideration. Is there a solution of using multiple scanners if I wish to
use different (i.e. not the default) socket locations (exiscan uses the
defaults as far as I can tell).
--
Alan Thew [email protected]
Computing Services,University of Liverpool Fax: +44 151 794-4442