On Thu, 22 Sep 2016, Thomas Barth wrote:
Hi ho,
a virus was found: Sanesecurity.Malware.26327.JsHeur.UNOFFICIAL
Scanner detecting a virus: ClamAV-clamd
Content type: Virus
Internal reference code for the message is 35123-18/WRf_y9XIIOFq
First upstream SMTP client IP address: [103.230.105.6]
According to a 'Received:' trace, the message apparently originated at:
[103.230.105.6], [103.230.107.6] unknown [103.230.105.6]
You REALLY should get your DNSBL problem fixed. Once you get DNSBLs
working it will help alot. That particular IP address hit almost a dozen
different RBLs here, including some that I use at the SMTP level to
out-right block incoming traffic (such as cbl.abuseat.org , Spamhaus PBL,
SBL).
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{