Jump to content


  • Posts

  • Joined

  • Last visited

About mmww

  • Rank

Profile Information

  • Location

Recent Profile Visitors

515 profile views
  1. Hi, i have a question because i once tried to update our Eset Mail Security for Linux on a debian based machine from version 4.0.10 to 4.5.3. I opened a support case at the german support team by mail in january, but they did not reply to me. I hope someone here can help me. After the upgrade to 4.5.3 the behavior differs from the state before. I tried to send the eicar test virus to my internal test account. With the old version 4.0.10 the recipient gets the cleaned up mail, the "full" mail goes into the quarantine. The daemon_notification_script was called and sent a mail to the administrator. After the upgrade, the recipient did not get the cleaned mail and there was no mail in the quarantine. The daemon_notification_script was executed and send a mail to the specified administrator. The upgrade script which migrates the esets.cfg config file produces a backup. Both files differ not on the corresponding lines. Only our quotation marks in the templates (av_eml_footnote_template_infected and av_eml_footnote_template_notscanned) were changed. Our goal is, that the local recipient gets a notification mail that somebody tried to send a message to him or that the local recipient gets the cleaned up mail. A notification mail should be sent to an administrator. In each case, we want to have the possibility to inspect the original mail and to forward or to delete it if we want to. This is our config-file: av_quarantine_enabled = yes av_scan_smart = yes action_av = "scan" action_av_infected = "discard" action_av_notscanned = "accept" action_av_deleted = "discard" action_as = "accept" action_as_spam = "accept" action_as_notscanned = "accept" av_eml_subject_modification_mask = "cleaned:deleted:infected:notscanned" av_eml_header_modification_mask = "clean:cleaned:deleted:infected:notscanned" av_eml_footnote_modification_mask = "infected:notscanned" av_eml_header_template = "%avstatus%" av_eml_subject_template = "[verdaechtige Email]" av_clean_mode = "standard" This is the notification mail, send by the daemon_notification_script with version 4.0.10 USERSPEC: recipient@domain.de|sender@domain.de MSGID: SENDER: Sender RECIPIENT: Recipient AV_STATUS: clean (cleaned) ACTION: accepted VIRUS: Eicar test file LOG: vdb=26541, agent=smtp, name="from: Sender to: Recipient with subject AW: Test dated Tue, 3 Nov 2015 13:34:16 +0100 ", virus="Eicar test file", action="quarantined - contained infected files", info="", avstatus="clean (cleaned)", hop="accepted" and this is the notification mail after the upgrade to version 4.5.3 USERSPEC: recipient@domain.de|sender@domain.de MSGID: <zarafa.56a2071c.7db5.46db4c753790cbb9@mailserver.domain.de> SENDER: RECIPIENT: AV_STATUS: infected ACTION: discarded VIRUS: Eicar test file LOG: vdb=27763, agent=smtp, name="dated Fri, 22 Jan 2016 11:40:28 +0100 ", virus="Eicar test file", action="unable to clean", info="", avstatus="infected", hop="discarded" Has anyone an idea? I cannot update to the new version as long as this behaviour is not corrected. thx and best Regards mmww
  2. Hallo together, i want to block certain file types like .bat, .exe, .pif (... packed in a zip file) and so on with Eset Mail Security for Linux (we are running version 4.0.10 installed on a debian based linux). User Marcos wrote in post https://forum.eset.com/topic/7247-future-wish-email-client-protection/?p=39212that it is possible to do so, but i have no idea where to configure this. I didn't find anything in the user manual or in the config file. Or in this forum Esets update mechanism says, there is an update available to version 4.5.3, but i think 4.5.3 is not v6 Can someone please help me? Thanks and best regards mmww
  • Create New...