Noel Jones-2 wrote:
> 
> On 4/22/2010 10:51 AM, Thomas Herzog wrote:
>>
>>
>>
>> Török Edwin wrote:
>>>
>>> On 04/22/2010 10:24 AM, Török Edwin wrote:
>>>>> lxhv1m02:~# grep ctl /etc/amavis/conf.d/15-av_scanners
>>>>>     \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.ctl"],
>>>
>>> You need to tell amavis to pass the entire message to ClamAV, try:
>>> $bypass_decode_parts = 1;
>>>
>>> I think your amavis tried to decode the message, and pass only parts of
>>> it to ClamAV.
>>>
>>> Best regards,
>>> --Edwin
>>> _______________________________________________
>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>> http://www.clamav.net/support/ml
>>>
>>>
>>
>> Hello, this solution seems to lever my "banned_filename_re"-filter out.
>> Perhaps, there's another solution?
>>
> 
> 
> 
> Find the "@keep_decoded_original_maps" section and uncomment 
> the line with:
> #  qr'^MAIL$', # retain full original message
> 
> 
> The side effect of this is that the mail will be virus scanned 
> twice; once for the whole message, and again each decoded 
> part.  On my machine clam is fast enough that this doesn't 
> make a significant difference in processing time.
> 
> 
>    -- Noel Jones
> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 


Thanks this did it, Regards Thomas H.
-- 
View this message in context: 
http://old.nabble.com/clamav-daemon-didn%27t-recognise-attached-virus-tp28288042p28337633.html
Sent from the clamav-users mailing list archive at Nabble.com.

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to