[Avcheck] Problem (what else?)

[Milan P. Stanic]

On 27-Aug-2001 Ralf Hildebrandt wrote:
> On Sun, Aug 26, 2001 at 10:08:46PM +0200, Milan P. Stanic wrote:
>  
>> But when I tried it with postfix (strictly following instructions from
>> README.Postfix) I see in log that postfix relays mail to avcheck (like
>> to a
>> blackhole). It does not detects EICAR.TXT virus.
> 
> Even if it is zipped?

Is it possible? It detects ziped eicar but when I send it unziped
it passes. But why? AvpDaemon detects eicar unziped, i.e. when I send it
through the next command:

/var/spool/avp/uchroot -u avpc / \
/var/spool/avp/avcheck -n -f root -d /var/spool/avp/./tst \
 -s avp:/var/spool/avp/ctl/AvpCtl root < eicar.msg

Milan
----------------------------------
OSS, IT Security
Consulting and Management
----------------------------------