Re: [Mailwatch-users] Re: Blocked filenames not showing

[David H. <dav...@gm...>]

On Fri, 12 Nov 2004 09:30:37 +0000, Martin Hepworth
<ma...@so...> wrote:
> 
> mooo :-)

Yes, it's friday can you tell?

> I presume other blocked are are showing fine, or is it all?

Viruses are highlighted Red like normal, but blocked filenames are not
highlighted and are shown clean.  There is nothing else which I am
seeing out of the ordinary right now.

> for that message id what does the underlying data in the mysql database
> look like, and also can you dig out the maillog file for that message,
> anything from dbitrace.log would be good too.

Logs:
============================================================
Nov 12 14:20:50 mx1 sendmail[12201]: iAC3KhA12201:
from=<da...@ho...>, size=75262, class=0, nrcpts=1,
msgid=<200...@mx...>,
proto=ESMTP, daemon=MTA, mech=LOGIN,
relay=220-244-164-248-nsw-pppoe.tpgi.com.au [220.244.164.248]
Nov 12 14:20:50 mx1 MailScanner[7465]: New Batch: Scanning 1 messages,
75830 bytes
Nov 12 14:20:50 mx1 MailScanner[7465]: MCP Checks completed at 75830
bytes per second
Nov 12 14:20:50 mx1 MailScanner[7465]: Spam Checks: Starting
Nov 12 14:20:50 mx1 MailScanner[7465]: Spam Checks completed at 75830
bytes per second
Nov 12 14:20:51 mx1 MailScanner[7465]: Virus and Content Scanning: Starting
Nov 12 14:20:52 mx1 MailScanner[7465]: Filename Checks: Windows/DOS
Executable (iAC3KhA12201 drtcp.exe)
Nov 12 14:20:52 mx1 MailScanner[7465]: Filetype Checks: No executables
(iAC3KhA12201 drtcp.exe)
Nov 12 14:20:52 mx1 MailScanner[7465]: Other Checks: Found 2 problems
Nov 12 14:20:52 mx1 MailScanner[7465]: Virus Scanning completed at
37915 bytes per second
Nov 12 14:20:52 mx1 MailScanner[7465]: Sender Warnings: Delivered 1
warnings to virus senders
Nov 12 14:20:52 mx1 MailScanner[7465]: Virus Processing completed at
75830 bytes per second
Nov 12 14:20:52 mx1 MailScanner[7465]: Disinfection completed at 75830
bytes per second
Nov 12 14:20:52 mx1 MailScanner[7465]: Batch completed at 37915 bytes
per second (75830 / 2)
Nov 12 14:20:52 mx1 sendmail[12217]: iAC3Kq712214:
to=...@ho..., delay=00:00:00, xdelay=00:00:00, mailer=local,
pri=30645, dsn=2.0.0, stat=Sent
============================================================

MySQL DB doesn't look any different from the message detail screen dump.

> I presume this is a clean installation of MS and you've not altered the
> messages produced in anyway???

Yes it's a clean install I'm not aware of any tinkering to this
particular install of MailWatch or MailScanner.

-- 
Regards,

David Hooton