Topic: No more mail after installing virus scanner

[raymondh]

I followed the how-to at http://www.pagefault.org/howto/amavis_clam.shtml
and now all mail sent to my server fails with this message:

Remote host said: 554 Permanent qmail-queue failure.

Can someone help me?

Ray

[raymondh]

It was a permission problem, I followed the instruction found in this message http://forums.contribs.org/index.php?topic=6306.msg22637#msg22637 and it fixed it.

On another note, I tried the email test at www.gfi.com/emailsecuritytest and clam (all updates) failed miserably.

[Bill Talcott]

raymondh wrote:
>
> On another note, I tried the email test at
> www.gfi.com/emailsecuritytest and clam (all updates) failed
> miserably.

Most of these are email client vulnerabilities. The problem is with the way the client handles code in an email. I don't really feel it's the mail server's job to filter out bugs in one line of email programs...

FYI, on Win98SE with OE6SP1, the CLSID test does show up as .jpg instead of the CLSID extension. However, the properties do indicate that it's an HTML file, and it doesn't have the .jpg icon. Clam blocked the EICAR test virus just like it's supposed to. I got all the other attachments, but nothing ran automatically or anything.

[raymondh]

I blocked one of the EICAR tests but missed the 5 part message that was set to automatically combine the parts after receiving it.  I'm not knocking it too hard, I'm just trying to get an idea of how capable it is.  Is there some place I can view the viris that it can catch?

[Bill Talcott]

http://clamav.elektrapro.com/

"...uses the virus database from OpenAntiVirus..."

The 5-part one also got through to me, but it was just 5 messages with 5 attachments. It didn't combine anything...

I'd say it's a decent email virus scanner, and nothing more. If you want 100% protection from every email vulnerability, this isn't it. If you want to scan for Klez infections and stuff, it seems to do ok.

[joshua b]

Just thought I'd add my 2 cents.

the 5 part message vulnerability is an Outlook Express thing.  OE lets you split messages into parts and then re-assembles them when they're received.  BUT you have to be using OE as your email client for this to effect you.

joshua b

[joshua b]

Just thought I'd add my 2 cents.

the 5 part message vulnerability is an Outlook Express thing.  OE lets you split messages into parts and then re-assembles them when they're received.  BUT you have to be using OE as your email client for this to effect you.

joshua b