I am running:
Linux 2.4.20-18.8 #6 SMP
exim-4.24
exiscan-acl-4.24-13And up until yesterday, clamav-0.60. With clamav-0.60, I logged message like this in syslog:
Nov 12 19:48:13 mail clamd[12690]: /var/spool/exim/scan/1AK8Sl-0003Hz-Lx/1AK8Sl-0003Hz-Lx-00000.zip: Trojan.Dropper.C FOUND
After upgrading to clamav-0.65 last night, I have begun logging messages like this:
Nov 13 03:40:30 mail clamd[25633]: /var/spool/exim/scan/1AKFpL-0006e6-Di/1AKFpL-0006e6-Di.eml: Trojan.Dropper.C FOUND
For some reason, the filename logged with 0.65 is the not the demimed filename of the attachment, but rather the the name of the file before it is demimed. I have demiming in exiscan-acl enabled.
Have I missed a configuration option change between 0.60 and 0.65, or am I missing something else? Any ideas or suggestions would be most appreciated.
Other than this small aspect, 0.65 seems to be working great!
Thanks, Tom
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
