internal scanning not performed

Hello

Since 1 week we have problems on hundreds of Linux Mail servers protected by NOD32.
It was working great for months, but Monday morning, a lot of messages were blocked by NOD32 engine.

ESET's support is giving no reply at all.

The problem is that we get an error message telling :
virus="is OK (internal scanning not performed)"

Looking deeper we found that :

2009-01-13 22:34:44 +0100 summary[0bbf0102]: vdb=14789, agent=cli, msgid=none, sndr="none", rcpt="none", object="mbx file", name="/var/spool/exim/scan/1LMquK-0000xp-Cl/1LMquK-0000xp-Cl.eml -> MBO", virus="is OK (internal scanning not performed)", action="", info=""

Since ESET support seems to be dead, is there anyone out there that could help?

Thanks

 

Hello dklein,

Has anything changed?

Email format unreadable/unable to decompress for scanning.


Did the mail format or mail clients change?

Thank you,
Richard

 

Do you have scanning of archives and email files enabled?

 

Hello

Nothing changed, as I said, we've noticed the problem on Monday morning, something happened during the weekend (no one did a change during weekend)

We don't know if mail format or mail clients changed, since those servers are just gateways to filter Email domains for our customers. We don't know what mail client they use, could be Outlook, Thunderbird, webmail...

Yes scanning of archives is actived, like it was already for months.

 

Could you confirm or deny that you have scanning of email files enabled? 1LMquK-0000xp-Cl.eml contains just one email message? If so, could you please contact customer care and provide them that file for perusal?

 

Yes scan_obj_emails option is activated.
Yes it contains only 1 file.

We've desactivated NOD32 since it was blocking ALL the E-mails, whatever the content...

 

Please send the eml file in question along with esets.cfg to support[at]eset.com, we'll check them out and discuss the issue directly with our developers, if necessary.