Confused!!!

I’m am using Avast 4.6 on winXP service pack 2 and am using Mozilla Thunderbird.
Is my Avast still scanning my email.
No clean messages are being put in on any email, in or out.
So I’m not sure if it is being scanned.

Help!

Dan

Sorry have to ask this question do you have this enabled with a format selected ie txt html?

If you want to be sure your mail is scanned, set like this one. Everytime avast scans mail, you’ll see detailed information about action performed.

Can you see in the headers of the messages (Right click the message, choose Properties and Details), for instance:

X-Antivirus: avast! (VPS 0XXX-X, XX/XX/2004), Inbound message
X-Antivirus-Status: Clean

Avast is not scanning my email.
I have just sent an Eicar test to my address and it was not picked up by Avast.

I have set Avast to the correct settings, as in previous answers, but still not being scanned.

I connect through a mail server, which we use a normaluser/pass as if you were connecting to an ISP.

The only difference I can see is that the pop and smtp server setting only contain an ip address and not pop.server.com or smtp.server.com.

Avast does work with outlook express with the ip address configuration, but as my copy of outlook express is not useable is the reason why I switched to Thunderbird.

I have tested this on another system with another proxy server and that works okay.

So the mystery continues.

Dan

The IP address would not happen to be 127.0.0.1 would it?

In Thunderbird is your POP3 port set to 110 and your SMTP port set to 25?

Do you know why your copy of Outlook Express is not usable?

No the IP address of our mail server is 192.168.0.100.

I think that OE has a corrupt file in it somewhere. As it hangs when trying to open certain folders. It also slows the system by 50%.

Dan

Thunderbirds ports are pop = 110 smtp = 25.

Dan

On the server settings in Thunderbird for the account do you have the box “Use secure connection (SSL)” checked?

I think it’s better to check the X-Antivirus headers as I’ve posted before and not just a test with eicar file.
You can use a proxy server with avast but the problem here seems to be configuration.
Are you sure your firewall allows connection for the necessary programs to receive and scan the mail?

Basically, Avast worked with OE before it crashed and doesn’t work with Thunderbird.
Both have the exact same server setup and settings.

Weird

Dazed and confused

Dan

Maybe try removing all accounts avast! is checking via the email wizard and let it re-detect them. (It has always auto-detected them for me).
As far as I know, the server settings (for Thunderbird at least) has to be 127.0.0.1
If you are using a rule based firewall you may have to set it to allow thunderbird to 127.0.0.1 also.

Confused:

I (with all due respect to the poster) suggest you ignore the suggestion from fannymites. Avast doesn’t “auto-detect” anything at all for Thunderbird. Avast makes (very reasonable) assumptions about how most people send e-mail.

You are quite right in that, from what you have told us so far, your e-mail should be scanned. We just need to find out why it appears that it is not.

I know that you have told us that the scanning worked with OE, there is very little difference between the way that OE functions (basically) and the way that Thunderbird does.

I’m sorry that you skipped my last question but if you will bear with me perhaps we can make some headway.

I think the time has come to stop asking you questions and to ask you to create a detailed log file of a mail session with Thunderbird to see what is happening from the Avast perspective.

If you are willing to proceed - to do this can you please:

Edit the avast4.ini file that you will most probably find in the Program Files\Alwil Software\Avast4\DATA

Within the

[Mail Scanner]

section of the file please add the line:

Log=20

Save the file.

Terminate and then restart the Internet Mail Provider.

Conduct your e-mail session with Thunderbird.

Following the completion of your e-mail session you should find a file named ashMaiSv.log in the folder:

Program Files\Alwil Software\Avast4\DATA\log

To edit the file and post it here you should stop the Internet Mail Provider. Please edit the file to make sure that it does not expose any personal information and then post it here so that we can see what is happening with Avast during your mail session.

You should repeat the changes to your avast4.ini file to remove the line:

Log=20

@alanrf
I am not sure what you mean that avast doesn’t auto detect anything.
I have never set avast up to do anything with email but it automatically scans all mail from Thunderbird, Object Dock mail checker and Desktop Sidebar mail checker.
The couple of occasions I have had any trouble with mail scanning I have done what I suggested and all was well.
I’m not saying you are right or wrong just wondering if you could explain.
Sorry if this is seen as hijacking this thread, if so feel free to delete/ignore it.

fannymites,

Avast simply assumes that everyone using standard POP3/SMTP will use the default ports 110/25 on the respective mail and smtp servers. Hence the Internet Mail provider automatically intercepts traffic directed to those ports and inserts itself into the traffic flow for Windows XP environments.

Remember what those ports mean - they are not the ports on your system. The way Thunderbird retrieves mail is to send a request to port 110 of the mail server. To send mail Thunderbird sends the mail to port 25 of the smtp server. When you suggest to someone to change the server setting on Thunderbird to 127.0.0.1 you are telling them to direct the mail requests to those ports on their own machine. Unless there is a program sitting on your own computer listening for traffic on those ports of your own computer then it is sending the traffic down a black hole and the default setting for Avast is to ignore all such traffic.

In earlier versions of Avast I understand that Avast needed mail to do what you are suggesting because it acted as a simple proxy by listening on those local ports as the way it got itself into the mail stream. I believe that may still be true for the Win 9x environments. Now, in the Windows XP environment (which Frampo is using) Avast does not work that way, it now has low level intercepts for traffic directed to ports 110 and 25.

Frampo’s mail server was another computer on his local lan. The default settings of Thunderbird and Avast should have intercepted his mail. The fact that Frampo said he had tested it on another system with another proxy server and that his own copy of Outlook Express was not usable certainly suggested something else was getting in the way of mail on his environment, so I proposed detailed logging to try to identify the block.

Since there has been no word recently I suspect that the cause of the problem was identified or interest in fixing it was lost.

Just before you I read your last post I was poking around in Thunderbird settings and noticed that the server settings are no longer changed to 127.0.0.1
Everything you said made perfect sense and since it’s been a long time since I’ve needed to do anything with the email settings I realise I should have really checked the facts before making any suggestions.