Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Tim Hogan on July 17, 2002, 01:20:26 AM

Title: RAV not scanning incoming mail after upgrade to 5.5
Post by: Tim Hogan on July 17, 2002, 01:20:26 AM

I upgraded to version 5.5 last week.  I have RAV version 8.3.3 installed on our system with the most recent virus definitions (7/15/2002).  Since the upgrade it no longer seems to be scanning incoming mail.  My maillog no longer shows scans taking place and today several emails infected with the Win32/Frethem.L@mm virus have gotten through to users. After they started arriving I ran ravscan manually and reveived several messages of viruses.  For each instance the ravscan message reported messages such as the following:

home/e-smith/files/users/pvarmenio/Maildir/new/1026844780.17798.e-smith-server->(part0000:)->(IFRAME0) Infected: HTML/IFrame_Exploit*
/home/e-smith/files/users/pvarmenio/Maildir/new/1026844780.17798.e-smith-server->(part0001:decrypt-password.exe) Infected: Win32/Frethem.L@mm

Tim Hogan

Title: Re: RAV not scanning incoming mail after upgrade to 5.5
Post by: John Alamo on July 17, 2002, 03:15:00 AM

I would recommend reinstalling RAV and seeing if that solves your problem .. sounds like the upgrade didn't keep all the necessary settings for RAV..

FYI -- you can test RAV using the eicar test file at http://www.eicar.org/ -- simply download, attach to an email, send it and see if RAV intercepts it -- if it does not, something is not configured correctly.

Title: Re: RAV not scanning incoming mail after upgrade to 5.5
Post by: Greg Zartman on July 17, 2002, 03:52:54 AM

Tim,

John is correct.  The upgrade overwrote the "hook" that ties RAV into your mail system.  Simply reinstall and the problem will be gone.   See the following:
http://myezserver.com/downloads/mitel/contrib/rav-8.3.2/rav-sme55-howto.html

If you do anything with RAV and SME, I'd make sure to check out myezserver.com before proceeding (howto and downloads sections).  Darrell is the local expert on RAV and SME servers.  He really stays on top of new developments and issues with RAV and SME.  

Regards,

Greg Zartman

Title: Re: RAV not scanning incoming mail after upgrade to 5.5
Post by: Tim Hogan on July 17, 2002, 05:51:24 PM

Thanks,

That took care of it.

Tim Hogan