The solution I found to work quickest and easiest was to edit /etc/clamav-unofficial-updates.conf (not at a computer right now, but if memory serves me correctly it was named something close to that) and comment out the 3 lines corresponding to the mbl databases to load.
It was something like: mbl_dbs: " mbl.ndb " then I just re-ran the clamav-unofficial-updates script as it appears in the the cron script under /etc/cron.d/ Then just for the heck of it I ran qmail-clam -s restart That disables the mbl db and seemed to work for us for the time being. However, it would be nice if there was a bit more automation we could build into this that would test definitions before applying them and allow for a quick and easy "rollback" or auto-failover that could run on its own to prevent such issues from occurring and would "rollback" or disable the definitions if certain characteristics were met. Just my two cents. --Casey James Price Operations/Technical Support Smile Global 800-541-9794 www.smileglobal.com Sent with Sparrow (http://www.sparrowmailapp.com/?sig) On Thursday, August 22, 2013 at 8:56 AM, Dan McAllister wrote: > This is a CLAMAV problem -- one of their vendors (MBL) released a pattern > that essentially matches anything with a :// in it -- or any URL. > It will also almost always match any attachment with a real message. > > The fix is to either wait out CLAMAV (or manually update with a "freshclam > start" command); disable CLAMAV scanning (what I did overnight -- it's fixed > today [Thurs]); or remove the pattern (beyond my CLAMAV config expertise). > > Dan > > On 8/22/2013 3:40 AM, Linux wrote: > > Hi All, > > I got the bounce back error every time as, > > > > Remote host said: 554 Your email was rejected because it contains the > > MBL_349876.UNOFFICIAL virus. > > > > Can anyone suggest me what to do? > > > > Regards, > > > > Vivek Patil > > system admin > > > > > > > > > > -- PLEASE TAKE NOTE OF OUR NEW ADDRESS =================================== > IT4SOHO, LLC 33 - 4th Street N, Suite 211 St. Petersburg, FL 33701-3806 CALL > TOLL FREE: 877-IT4SOHO 877-484-7646 Phone 727-647-7646 Local 727-490-4394 Fax > We have support plans for QMail!
