From my log today:

# fgrep 02571-07 mail.log
Apr  1 02:28:46 mail amavis[2571]: (02571-07) ESMTP::10025 
/var/amavis/amavis-20100401T022439-02571: <brown...@orange.fr> ->
<recipi...@charite.de> SIZE=3548 Received: from mail.charite.de ([127.0.0.1]) 
by localhost (mail.charite.de [127.0.0.1]) (amavisd-new,
port 10025) with ESMTP for <recipi...@charite.de>; Thu,  1 Apr 2010 02:28:46 
+0200 (CEST)
Apr  1 02:28:46 mail amavis[2571]: (02571-07) Checking: oeIasxg1NKGW 
[193.252.22.121] <brown...@orange.fr> -> <recipi...@charite.de>
Apr  1 02:28:46 mail amavis[2571]: (02571-07) p003 1 Content-Type: 
multipart/alternative
Apr  1 02:28:46 mail amavis[2571]: (02571-07) p001 1/1 Content-Type: 
text/plain, size: 888 B, name: 
Apr  1 02:28:46 mail amavis[2571]: (02571-07) p002 1/2 Content-Type: text/html, 
size: 973 B, name: 
Apr  1 02:28:46 mail amavis[2571]: (02571-07) run_av (ClamAV-clamd): 
/var/amavis/amavis-20100401T022439-02571/parts INFECTED: 
Apr  1 02:28:46 mail amavis[2571]: (02571-07) virus_scan: (), detected by 1 
scanners: ClamAV-clamd
Apr  1 02:28:46 mail amavis[2571]: (02571-07) Virus  matches (?-xism:.*), 
sender addr ignored
Apr  1 02:28:46 mail amavis[2571]: (02571-07) Blocked INFECTED (), 
[193.252.22.121] [193.252.22.121] <brown...@orange.fr> ->
<recipi...@charite.de>, Message-ID: 
<24082678.22369.1270081721854.javamail....@wwinf1d07>, mail_id: oeIasxg1NKGW, 
Hits: -, size: 3732, 53 ms
Apr  1 02:28:46 mail postfix/smtpd[31932]: proxy-reject: END-OF-MESSAGE: 554 
5.7.0 Reject, id=02571-07 - INFECTED: ; from=<brown...@orange.fr> 
to=<recipi...@charite.de> proto=ESMTP
helo=<smtp1d.orange.fr>
Apr  1 02:28:46 mail amavis[2571]: (02571-07) TIMING [total 56 ms] - SMTP 
greeting: 1 (2%)2, SMTP EHLO: 0 (1%)3, SMTP pre-MAIL: 0 (1%)4,
SMTP pre-DATA-flush: 1 (3%)6, SMTP DATA: 1 (1%)7, check_init: 0 (1%)8, 
digest_hdr: 1 (2%)10, digest_body_dkim: 0 (0%)10, gen_mail_id: 1
(1%)12, mime_decode: 9 (16%)28, get-file-type2: 10 (18%)46, parts_decode: 0 
(0%)46, check_header: 1 (2%)49, AV-scan-1: 11 (20%)69,
read_snmp_variables: 0 (1%)70, best_try_originator: 3 (6%)75, update_cache: 1 
(2%)77, decide_mail_destiny: 1 (2%)79, prepare-dsn: 1
(2%)81, main_log_entry: 8 (14%)96, update_snmp: 1 (2%)98, SMTP pre-response: 0 
(0%)99, SMTP response: 0 (0%)99, unlink-2-files: 0
(0%)99, rundown: 1 (1%)100

Is that normal? Does it happen often?
-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de
            

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to