NOD32 LMS Not scanned

Discussion in 'NOD32 version 2 Forum' started by kcieniuch, Apr 19, 2004.

Thread Status:
Not open for further replies.
  1. kcieniuch

    kcieniuch Registered Member

    Feb 25, 2004
    I've discovered that when I get emails from domain (very popular Polish free email provider) I always get status not scanned

    this is snip from my log:

    2004-04-16 10:49:34 +0100 1082106696: agent=mda, msgid=<>, object="", name="mail -> MIME", virus="", actio
    n="", info="error occured while reading archive"
    2004-04-16 10:49:35 +0100 1082106696: connection closed

    I've examined their mails and found that they are little bit out of specs.
    In mime multipart messages there is no ending multipart tag.
    I think that nod32d assumes that it didn't got whole message and sends me
    this warning.
    So if somebody will send virus from this site then I have no protection on my mail server and since some of the emails are really important I can't forbid my users to open some of them.
    Of course I could block all messages with attachments from this site, but since we get many e-mails from it, I would be hanged the next day :)

    More over non of my MUA's (Mozilla, Netscape,Outlook Express,Microsoft Outlook,Opera etc.) had ever problems to properly interpret such emails so I think that nod32d also had to cope with them.
    In real world you can't assume that every email will be properly constructed
    with all of it parts on place, specialy if they are generated by viruses,
    and "not scanned" is simply - not a solution.

    Krzysztof Cieniuch
Thread Status:
Not open for further replies.