Bob Pierce wrote: > Of course the zip attachment contains a virus, and ClamAV does not seem > to be catching that either.
At my site, ClamAV has been catching them as "Email.Trojan.GZC" for some time. You might want to check your ClamAV patterns and/or config. For newer ones that Clam doesn't yet catch, MIMEdefang might be an option if you use sendmail. filter_bad_filename() is the applicable function. -Matt