Hello, I have a setup where procmail passes messages through SpamAssassin, and then through clamav (using the trashscan 0.08 script). This is getting most spam and virii I get, but some still get through. I have compared some of those that get through with some of the ones that get caught by clamav, and in both cases, they contain the Swen/Gibe virus.
I tried saving the attachment to disk (for one of the messages that got through), and then using the ClamAV Sample Tester (http://www.gietl.com/test-clamav/), and it DOES recognize the Gibe virus/worm. The one lead I have, is that for each such message that gets through, I get a message to root saying "Cannot handle any part of multipart/alternative message". The messages' Content-type header is "multipart/alternative", so that seems to be the problem. If so, why can't clamav scan attachments to this type of messages? Is there a way that I could change the Content-type header (with a procmail rule, for example) so that clamav would be able to scan these messages? Thanks in advance, J-S ________________________________________________ Jean-S�bastien Guay [EMAIL PROTECTED] http://whitestar02.webhop.org/ ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
