Koozali.org: home of the SME Server

RAV keeps sending me an email back (and others)

Adam

RAV keeps sending me an email back (and others)
« on: February 21, 2002, 01:26:43 AM »
Gday there,

don't know if anyone can help but I'm a bit stuck at the moment.

I've installed RAV and it seemed to be going ok. I sent a test attachment file through (bat) and the system correctly stopped it and sent me back an email. However, that email keeps coming back every 10 minutes for the last day or so. Also, it is happening to others.

When I disable the scanning of rav through SME server-manager the suspect email came through.

I don't want to leave this scanning off. Does someone know what' going on. I tried to contact by phone RAV but no answer.

cheers,

Adam

Peter

Re: RAV keeps sending me an email back (and others)
« Reply #1 on: February 21, 2002, 02:14:52 AM »
Have a look on www.myezserver.com Darrel has a fix for this

Peter

Adam

Re: RAV keeps sending me an email back (and others)
« Reply #2 on: February 21, 2002, 02:27:40 AM »
Peter,

don't suppose you know where abouts on myezserver it is ?

cheers,

Adam

Steve Bush

Re: RAV keeps sending me an email back (and others)
« Reply #3 on: February 21, 2002, 03:36:14 AM »
I don't have a fix, but my tests produced the same results.
I disabled RAV and allowed the message through, then reenabled it.

I believe that there is a circular problem somewhere in the code, but I haven't taken a closer look yet.  To me it appears to bounce the message, then scan the bounced message, then bounce that message, etc, etc.

Darrell released a patch recently.  I haven't tested it to see if it fixes this problem though.

Adam

Re: RAV keeps sending me an email back (and others)
« Reply #4 on: February 21, 2002, 03:38:41 AM »
Thanks Steve,

what should I do now though ? Not scan anything that comes in ?

cheers,

Adam

Peter

Re: RAV keeps sending me an email back (and others)
« Reply #5 on: February 21, 2002, 05:56:06 PM »
Adam

Darrell has reorganised his site and I can not see it there, e-mail him as his latest fix may have resolved this rebouncing problem.

Peter

charlie

Re: RAV keeps sending me an email back (and others)
« Reply #6 on: February 21, 2002, 10:52:10 PM »
I have exactly the same problem. If you find an answer I'd love to know about it. Mine is looping every 2 minutes!

Greg Zartman

Re: RAV keeps sending me an email back (and others)
« Reply #7 on: February 22, 2002, 01:31:53 AM »
I believe you are having a problem with the content filtering.  I had a simular problem awhile back and Darrel suggested I set all three of the associated options to No.  Since then, I haven't had a problem

Greg

Steve Bush

Re: RAV keeps sending me an email back (and others)
« Reply #8 on: February 22, 2002, 01:34:21 AM »
That's actually what I did, but I assumed that this same looping would occur whenever a virus was found...which so far, there haven't been any.
Possibly it is only when a bounced message originates from the local network.

Charlie

Re: RAV keeps sending me an email back (and others)
« Reply #9 on: February 22, 2002, 03:07:52 AM »
Mine is not from a content filter. It was from a found virus. The RAV people had me send a bunch of files to them to look at. I'll pass on any fixes.Greg Zartman wrote:
>
> I believe you are having a problem with the content
> filtering.  I had a simular problem awhile back and Darrel
> suggested I set all three of the associated options to No.
> Since then, I haven't had a problem
>
> Greg

Greg Zartman

Re: RAV keeps sending me an email back (and others)
« Reply #10 on: February 22, 2002, 03:41:37 AM »
Yes, I've noticed this looping action in RAV as well.  I haven't seen it since upgrading to the latest version on myezserver.com however.

Greg

Charlie

Re: RAV keeps sending me an email back (and others)
« Reply #11 on: February 22, 2002, 03:52:12 AM »
what version are you using?


Greg Zartman wrote:
>
> Yes, I've noticed this looping action in RAV as well.  I
> haven't seen it since upgrading to the latest version on
> myezserver.com however.
>
> Greg

Greg Zartman

Re: RAV keeps sending me an email back (and others)
« Reply #12 on: February 22, 2002, 04:08:45 AM »
8.3.2

Steve Bush

Re: RAV keeps sending me an email back (and others)
« Reply #13 on: March 07, 2002, 07:54:12 PM »
I applied Darrell May's latest version available on his server.
So now I have:
dmc-mitel-rav-8.3.2-15
ravmd-8.3-2
ravcore-8.5-0
ravqmail-8.3-0

My problems with this version are:
1. When I setup RAV to block .exe attachments, then send a file with an .exe attachment from an outside email account to my internal email account, RAV blocks forwarding the message and sends its alert notices to both the outside and the inside account.  After that, I don't believe that RAV is moving the message to the quarantine folder.  Instead I think it is continually rescanning it.

2. The updates are scheduled to kick off hourly.  I am getting quite a few admin emails from RAV explaining that the updates failed.  I am speculating that the update system is mistaking an update failure based on already having the latest version of the virus signature, for a failure based on being unable to connect to the RAV FTP site.

Dean Mumby

Re: RAV keeps sending me an email back (and others)
« Reply #14 on: March 08, 2002, 02:21:44 PM »
Is there a solution to this problem yet ?