NOD32 LMS Not scanned

Discussion in 'NOD32 version 2 Forum' started by kcieniuch, Apr 19, 2004.

Thread Status:
Not open for further replies.
  1. kcieniuch

    kcieniuch Registered Member

    Joined:
    Feb 25, 2004
    Posts:
    4
    I've discovered that when I get emails from domain wp.pl (very popular Polish free email provider) I always get status not scanned

    this is snip from my log:

    2004-04-16 10:49:34 +0100 1082106696: agent=mda, msgid=<407f9e000618e@wp.pl>, object="", name="mail -> MIME", virus="", actio
    n="", info="error occured while reading archive"
    2004-04-16 10:49:35 +0100 1082106696: connection closed

    I've examined their mails and found that they are little bit out of specs.
    In mime multipart messages there is no ending multipart tag.
    I think that nod32d assumes that it didn't got whole message and sends me
    this warning.
    So if somebody will send virus from this site then I have no protection on my mail server and since some of the emails are really important I can't forbid my users to open some of them.
    Of course I could block all messages with attachments from this site, but since we get many e-mails from it, I would be hanged the next day :)

    More over non of my MUA's (Mozilla, Netscape,Outlook Express,Microsoft Outlook,Opera etc.) had ever problems to properly interpret such emails so I think that nod32d also had to cope with them.
    In real world you can't assume that every email will be properly constructed
    with all of it parts on place, specialy if they are generated by viruses,
    and "not scanned" is simply - not a solution.

    Krzysztof Cieniuch
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.