James Brown wrote: > I'm getting spam passing through that should be being blocked by ClamAV. > If I run clamscan or clamdscan on the file in my spam folder, it gets > picked up as a virus. > > But they are being stopped by ASSP & ClamAV, so ASSP applies all its > other checks (and correctly recognises it as spam). > > Here is an example header: > <-snip-> > > Running clamdscan on the file: > > /usr/local/bin/clamdscan /Applications/assp-1/spam/8995.eml > /Applications/assp-1/spam/8995.eml: > Email.ScamL.Gen079.Sanesecurity.06053105 FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.362 sec (0 m 0 s) > > As you can see from my clamd.log, some emails are being trapped by > ClamAV (being called by ASSP): > <-snip-> > > (For anyone wondering if the Sanesecurity files are worth installing, > look at the above!) > > DoBlockExes is 0 > UseAvClamd is set > NoScanRe is empty > ScanWL is set > ClamAV Bytes is 100000 > > Is there something that is stopping ClamAV being invoked under certain > circumstances? > > Running 1.3.4 (12).
If a message is already blocked i don't believe ASSP will bother with a virus scan. Kevin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
