Re: Just when you thought Macafee stuff was safe!

["gregh" <chows () ozemail com au>]

----- Original Message ----- 
From: "Keith W. McCammon" <keith-list () mccammon org>
To: "gregh" <chows () ozemail com au>
Cc: <full-disclosure () lists netsys com>
Sent: Wednesday, September 24, 2003 12:12 AM
Subject: Re: [Full-disclosure] Just when you thought Macafee stuff was safe!


> Any chance this is caused by not excluding the spamkiller program
> directories and/or repositories within the Virusscan engine?

Now if it were only that easy! There is, currently, no way to do exclusions
with VSO.

> Never used VSO, but this is standard practice for these types of
> "overlapping" tools.  For example, directories associated with mail
> server engines, SMTP gateways, etc. must be excluded from the system
> engine to prevent duplicative scanning, as well as some more serious
> stability issues.

I understand you are correct and it IS normal not to have them overlap but
the current situation with VSO and Spamkiller, both from Macafee, is that
they DO overlap, unfortunately. I do actually have Macafee V6 and V5 sitting
around and set them up again to check out, not able to remember if
exclusions were limited to Recycle Bin or not. You CAN limit those versions
from scanning desired dirs (folders) but not VSO. I will add a disclaimer to
this - I have checked out VSO thoroughly and cannot FIND any way to exclude
a damned thing from the dirs to be scanned but I always work by the idea
that I am not 100% correct 100% of the time which is why I emailed Macafee
people to see what their response is. That response was "How does this
happen?" basically for now. More info (rehash of what I told them in the
first place) sent back and awaiting their response to that.

Greg.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html