Ticket #3206 (closed defect: worksforme)
Virus doesn't moved in quarantine
| Reported by: | lioncub@… | Owned by: | jamor@… |
|---|---|---|---|
| Milestone: | 2.2 | Component: | base |
| Severity: | normal | Keywords: | |
| Cc: |
Description
Example virus Eicar (rexswain.com/eicar.html).
If copy virus from windows on samba share all OK (virus moved), but but NO message!
But if copy virus from linux virus doesn't moved (only bloced)!!!
Attachments
Change History
comment:2 Changed 21 months ago by jamor@…
- Status changed from new to closed
- Resolution set to worksforme
Hello lioncub,
I had tested it with Linux's smbclient and eicar was moved to quarantine:
root@z22:~# cat /var/lib/zentyal/quarantine/* X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
Anyway this is done server side so this behaviour should not change with different clients.
The scan and quarantine is done when reading the file from the share; maybe you had put it in the share with the linux client and you haven't read it yet?.
Please, try to read the eicar file again and check your configuration. If you can confirm this error, please give us more information and reopen the ticket.
Cheers,
Javier