Graziano , I am also using those and other rulesets. I am using ClamAV 0.94.2/8946 ASSP 1.5.1(RC 0.02.04).
All mine that have no ip and <> occur when the clamd message returned from clamd after the message has been typed as spam and placed in spam directory, such as: Feb-3-09 09:14:04 [MessagScore] 189.7.165.199 <mico.adri...@autofocuscolumbus.com> to: x...@x.com [spam found] (MessageScore 175, limit 50) -> ./spam/4479.eml; Feb-3-09 09:14:05 Disconnected: 189.7.165.199 Feb-3-09 09:14:05 <> to: x...@x.com ClamAV: scanned 1882 bytes in message - OK Notice in the example from my logs ASSP had the ip and sender up to the time of disconnect. Now I am not saying that what we both see in the logs is the best way of displaying the status just that this is what I see. Personally I think the IP and sender should be cached with the clamd call so that the clamd log line could be complete. I would also rather have the clamd log line be output before the disconnect as the finding of a virus might supercede the error that the message score was met in terms of reporting back to the sender. Tom At 7:46 PM +0100 2/3/09, Graziano wrote: >For me the countrary , 95% without ip and email , 5% complete with ip >and from email. >(I am using sanesecurity and other unofficial clamd signatures) > >Graziano >> I see the same at times but they are just null senders to stop mail >> loops. I see plenty with valid mail from's. >> >> Tom >> >> >>> Hello >>> >>> with latest ASSP versions I am noticing this with ClamAV (I found this >>> problem since 1.4.4 build 6.4 and now also with latest) >>> >>> Feb-3-09 12:31:42 <> to: m...@my.com ClamAV: scanned 9401 bytes in >>> message - OK >>> >>> As can you see there is no ip , no message ID , and no sender email . Is >>> it normal ? >>> It happens only with clamAV >>> >>> Thank you >>> Graziano >>> >>> >>>------------------------------------------------------------------------------ >>> Create and Deploy Rich Internet Apps outside the browser with >>>Adobe(R)AIR(TM) >>> software. With Adobe AIR, Ajax developers can use existing skills >>>and code to >>> build responsive, highly engaging applications that combine the >>>power of local >>> resources and data with the reach of the web. Download the Adobe >>>AIR SDK and >>> Ajax docs to start building applications >>>today-http://p.sf.net/sfu/adobe-com >>> _______________________________________________ >>> Assp-test mailing list >>> Assp-test@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/assp-test >>> >> >> >> >> >>------------------------------------------------------------------------------ >> Create and Deploy Rich Internet Apps outside the browser with >>Adobe(R)AIR(TM) >> software. With Adobe AIR, Ajax developers can use existing skills >>and code to >> build responsive, highly engaging applications that combine the >>power of local >> resources and data with the reach of the web. Download the Adobe AIR SDK and >> Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com >> _______________________________________________ >> Assp-test mailing list >> Assp-test@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-test >> >> > > >------------------------------------------------------------------------------ >Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) >software. With Adobe AIR, Ajax developers can use existing skills and code to >build responsive, highly engaging applications that combine the power of local >resources and data with the reach of the web. Download the Adobe AIR SDK and >Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com >_______________________________________________ >Assp-test mailing list >Assp-test@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/assp-test -- Tom Shaw - Chief Engineer, OITC <ts...@oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather US Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/voice mail,pager) Text Paging: http://www.oitc.com/Pager/sendmessage.html AIM/iChat: trs...@mac.com Never argue with an idiot: a bystander can't tell the difference. - Mark Twain ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
