> ClamAV is happily scanning all my incoming mail. However, it never
> finds a virus. I have tested it with known viruses, I have scanned
> suspect mail that arrived with a local virus scanner on my Mac and
> found viruses that slipped by and I have used on-line virus tests to
> send test files. Everything gets by. Here are the logs for the last
> virus that got by:
>
> 15:56:33.46 2 LOCALRULES(chad) [490316] rule(Dangerous Attachment)
> action #0: added header 'X-Attachment: POTENTIALLY DANGEROUS'
> 15:56:33.46 2 LOCALRULES(chad) [490316] rule(Dangerous Attachment)
> action #1: added header 'X-Color: red'
> 15:56:33.48 2 MAILBOX(chad/Suspicious Extensions) {23} appended:
> 18633(313) bytes, 272 lines
> 15:56:33.48 2 MAILBOX(chad/Suspicious Extensions) [490316] stored as 23
> 15:56:33.48 2 LOCALRULES(chad) [490316] rule(Dangerous Attachment)
> message stored in 'Suspicious Extensions'
> 15:56:33.49 2 LOCALRULES(chad) [490316] rule 'Dangerous
> Attachment'(React) -> [490312]
> 15:56:33.49 2 LOCALRULES(chad) [490316] rule(Dangerous Attachment)
> discarded the message
> 15:56:33.49 2 ACCOUNT(chad) [490316] delivered
> 15:56:33.49 2 DEQUEUER [490316] LOCAL(chad) delivered
>
The problem is with the software calling clamscan/clamd. Check your config.
Matt
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
