1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Dr.Web doesn't work

Discussion in 'Plesk for Linux - 8.x and Older' started by matobago, Sep 27, 2005.

  1. matobago

    matobago Guest

    I already purchase unlimited licences for Dr. Web but when i send to myself an e-mail with virus, i can recive it with the atachments infected and in the control panel i have checked the radio buttons for "Incoming and outgoing mail" I also send this mails to hotmail and hotmail told that these atachments has WORM_NETSKY.D, so why drweb not erase or do something with these mails ???
  2. Whistler

    Whistler Guest

    What version of Plesk are you using? What OS?

    I suspect there's a bug in (at least) the Plesk 7.5.4 for FreeBSD - DrWeb stoped checking e-mails on any account here after the last upgrade- so I had to manualy change the configuration to check all e-mails regardles of Control Panel settings.

    But what does your logs say? Whats in your qmail and drweb logfiles?
  3. matobago

    matobago Guest

    where is the drweb log file, because i don't have nothing in the maillog ansd i have this in the header file

    From: sender@domain.com
    Subject: Fwd: estos
    Date: September 27, 2005 5:18:43 PM MDT
    To: recipent@domainto.com
    Return-Path: <sender@domain.comt>
    Delivered-To: 33-recipient@domain.com
    Received: (qmail 73234 invoked from network); 27 Sep 2005 17:18:07 -0600
    Received: from domain.com (HELO server.domain.com) (XXX.XXX.XXX.XXX) by domainto.com with SMTP; 27 Sep 2005 17:18:07 -0600
    Received: by server.domain.com (Postfix, from userid 65534) id 395D9576F4; Tue, 27 Sep 2005 17:18:29 -0600 (MDT)
    Received: from [] (domain.who.send [XXX.XX.XXX.XX]) by server.domain.com (Postfix) with ESMTP id A5BDD57621 for <recipient@domain.com>; Tue, 27 Sep 2005 17:18:28 -0600 (MDT)
    Mime-Version: 1.0 (Apple Message framework v734)
    Message-Id: <3F6EC5A6-4E12-48C1-A8BD-DEA3DAAA353A@domain.comt>
    Content-Type: multipart/alternative; boundary=Apple-Mail-14--767931975
    References: <a61c5f67050927152056696e75@mail.gmail.com>
    X-Mailer: Apple Mail (2.734)
    X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on iGrup.transtelco.net
    X-Spam-Status: No, hits=-4.7 required=5.0 tests=AWL,BAYES_00, MICROSOFT_EXECUTABLE autolearn=ham version=2.64
  4. Whistler

    Whistler Guest

    DrWeb log is in /var/drweb/log and maillogs are in /usr/local/psa/var/log/maillog (at leat on the BSD version)
  5. matobago

    matobago Guest

    How manually enable antivirus check

    The virus log only tells but there is not any activity when there is an incoming mail.

    Wed Sep 28 16:11:07 2005 Total virus records: 88669
    Wed Sep 28 16:11:07 2005 Key file: /usr/local/drweb/drweb32.key
    Wed Sep 28 16:11:07 2005 Key file number: 0010091270
    Wed Sep 28 16:11:07 2005 License for scanning files: None
    Wed Sep 28 16:11:07 2005 License for scanning mails: Unlimited
    Wed Sep 28 16:11:07 2005 Daemon is installed, active interfaces:

    How can I manually enable antivirus checking?

    Please help
  6. poke

    poke Guest

    I have the answer!!! DON'T use DRWEB :) It has been broken since the day it was released. Broken meaning, ease of use and pricing structure. Don't support DR WEB ;)
  7. Whistler

    Whistler Guest

    And as always I have to say... DrWeb works great on FreeBSD - it catches 100% virusmails here.

    And yes, there has been some bugs now and then - but until now - nothing that coulden't be solved by tweaking some scripts...

    But I can agree on one thing - it's not cheap - could be better priced.
  8. poke

    poke Guest

    :) nice to hear it's working better now.... I bought 1 license a long time ago and decided that wasn't the antivirus route for me or my resellers ;)