internal scanning not performed

Discussion in 'ESET NOD32 Antivirus' started by dklein, Jan 15, 2009.

Thread Status:
Not open for further replies.
  1. dklein

    dklein Registered Member

    Joined:
    Mar 24, 2006
    Posts:
    19
    Location:
    Paris, France
    Hello

    Since 1 week we have problems on hundreds of Linux Mail servers protected by NOD32.
    It was working great for months, but Monday morning, a lot of messages were blocked by NOD32 engine.

    ESET's support is giving no reply at all.

    The problem is that we get an error message telling :
    virus="is OK (internal scanning not performed)"

    Looking deeper we found that :

    2009-01-13 22:34:44 +0100 summary[0bbf0102]: vdb=14789, agent=cli, msgid=none, sndr="none", rcpt="none", object="mbx file", name="/var/spool/exim/scan/1LMquK-0000xp-Cl/1LMquK-0000xp-Cl.eml -> MBO", virus="is OK (internal scanning not performed)", action="", info=""

    Since ESET support seems to be dead, is there anyone out there that could help?

    Thanks
     
  2. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    995
    Location:
    San Diego, CA USA
    Hello dklein,


    Has anything changed?


    Email format unreadable/unable to decompress for scanning.


    Did the mail format or mail clients change?

    Thank you,
    Richard
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Do you have scanning of archives and email files enabled?
     
  4. dklein

    dklein Registered Member

    Joined:
    Mar 24, 2006
    Posts:
    19
    Location:
    Paris, France
    Hello

    Nothing changed, as I said, we've noticed the problem on Monday morning, something happened during the weekend (no one did a change during weekend)

    We don't know if mail format or mail clients changed, since those servers are just gateways to filter Email domains for our customers. We don't know what mail client they use, could be Outlook, Thunderbird, webmail...

    Yes scanning of archives is actived, like it was already for months.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could you confirm or deny that you have scanning of email files enabled? 1LMquK-0000xp-Cl.eml contains just one email message? If so, could you please contact customer care and provide them that file for perusal?
     
  6. dklein

    dklein Registered Member

    Joined:
    Mar 24, 2006
    Posts:
    19
    Location:
    Paris, France
    Yes scan_obj_emails option is activated.
    Yes it contains only 1 file.

    We've desactivated NOD32 since it was blocking ALL the E-mails, whatever the content...
     
  7. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Please send the eml file in question along with esets.cfg to support[at]eset.com, we'll check them out and discuss the issue directly with our developers, if necessary.
     
Thread Status:
Not open for further replies.