If your running the unofficial-clamav-signatures package, you may want to check to see if your emails are being blocked by rule MBL_349876.
grep MBL_349876 /var/log/exim/main.log If they are .. you can add an ignore rule by [root@mx01 clamav]# clamav-unofficial-sigs.sh -b Input a third-party signature name that you wish to bypass due to false-positives and press enter (do not include '.UNOFFICIAL' in the signature name nor add quote marks to any input string): MBL_349876 Signature 'MBL_349876' has been added to the local.ign signature bypass file and databases have been reloaded. The script will track any changes to the offending third-party signature and will automatically remove the signature bypass entry if either the signature is modified or removed from the third-party database. I've had a dozen servers eat it this morning over this rule. Blocks everything. -- Jeremy McSpadden Flux Labs, Inc | http://www.fluxlabs.net | Endless Solutions Office : 850-250-5590x101 | Cell : 850-890-2543 | Fax : 850-254-2955
_______________________________________________ http://pledgie.com/campaigns/12056
