ConfigServer Community Forum

The "Hourly Log Scanner Report" is not delivered and is blocked because MailScanner flagged this report with virus:

Clamd: msg-691013-207.txt was infected: YARA.r57shell_php_php.UNOFFICIAL
Clamd: message was infected: YARA.r57shell_php_php.UNOFFICIAL

Where I can do a check of this file msg-691013-207.txt ?

Thanks,
Sergio

PS: Next post will guide you on how to fix this.

To fix this, do the following:
- check where is located %rules-dir%/virus.scanning.rules

Once in that folder edit virus.scanning.rules and add the email address that you don't want to be checked by viruses, per example:

From: 127.0.0.1 and From: postmaster@server.domain.com no # postmaster

That will fix the issue.

Sergio