Virus Detected - But can not be seen on Tracking Center

koby

Renowned Member
Jun 21, 2012
138
4
83
Natanya , Israel
Hello Guys ,
Today at 1400 (IST) I experience massive virus attack which was blocked by the systems tanks to ESET anti virus (script that run as custom one).
But , the virus log can not be seen on the Tracking Center.
Because of the rules I made , which notify me as admin on any kind of spam/virus etc , I could see that attach did happened.
I trace the my syslog for the DEBUG info and I manage to find this ...

Code:
ERROR: MIME::Body::File->open /tmp/.proxdump_1250_7EAF560869E6F6DE98/xE3o de pagamento 068357_26_04_2021.exe: No such file or directory at /usr/share/perl5/MI
ME/Body.pm line 435.
Apr 26 14:05:27 smg01 pmg-smtp-filter[1250]: 7EAF560869E6F6DE98: processing time: 8.075 seconds (3.918, 0, 3.822)
Apr 26 14:05:27 smg01 postfix/smtpd[30897]: proxy-reject: END-OF-MESSAGE: 451 4.4.0 detected undelivered mail (7EAF560869E6F6DE98); from=<L.ferrari@oiv.int> to=<import@ofer.co.il> proto=ESMTP helo=<mail3
.sztoozed.com>

Can someone advice me on that please.

Best Regards ,
Koby Peleg Hen
 
My guess: your custom script deletes the discovered virus-attachment?
this results in pmg-smtp-filter being confused (since it expects its files to remain in place)

try configuring eset not to delete the virus

I hope this helps!
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!