Modify

Ticket #3206 (closed defect: worksforme)

Opened 21 months ago

Last modified 21 months ago

Virus doesn't moved in quarantine

Reported by: lioncub@… Owned by: jamor@…
Milestone: 2.2 Component: base
Severity: normal Keywords:
Cc:

Description

Example virus Eicar (rexswain.com/eicar.html).

If copy virus from windows on samba share all OK (virus moved), but but NO message!

But if copy virus from linux virus doesn't moved (only bloced)!!!

Attachments

Change History

comment:1 Changed 21 months ago by jacalvo@…

  • Owner changed from jacalvo@… to jamor@…

comment:2 Changed 21 months ago by jamor@…

  • Status changed from new to closed
  • Resolution set to worksforme

Hello lioncub,

I had tested it with Linux's smbclient and eicar was moved to quarantine:

root@z22:~# cat /var/lib/zentyal/quarantine/*
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Anyway this is done server side so this behaviour should not change with different clients.

The scan and quarantine is done when reading the file from the share; maybe you had put it in the share with the linux client and you haven't read it yet?.

Please, try to read the eicar file again and check your configuration. If you can confirm this error, please give us more information and reopen the ticket.

Cheers,

Javier

View

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.