I'm seeing logs like:
Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Seems strange to me that the invalid users would have made it past sendmail's RCPT TO and into the AV engine. I'm guessing it's a bug.
Sometimes the invalid user is first, sometimes not.
Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- _______________________________________________ http://lurker.clamav.net/list/clamav-users.html