In my virus log I see this error:
Waring: Virus Scanner reported an error #8.
F-Prot will return a #8 code if it finds a suspicious file. You may want
to try adding /NOHEUR to the SCANFILE line in \IMail\Declude\virus.cfg
to prevent F-Prot from running its heuristics test, which could be
Which runs first on the Imail machine
when an email comes in: Declude or
the kill.lst and rules.ima?
First (when the E-mail is being received), the kill.lst and access control
(IP list) are run.
Next, Declude is called.
Finally, during the delivery, the rules.ima is used.