Peter, as to your question about headers: > A message you sent to > <[EMAIL PROTECTED]> > contained a virus and has not been delivered. > /data/mail/clamav-quarantine/msg.2K5skR: Worm.SCO.A-dam FOUND > The message in question has been quarantined as > /data/mail/clamav-quarantine/msg.2K5skR > > The message was received by goldfisch.at from <[EMAIL PROTECTED]> > > For your information, the original message headers were: > > Received: (qmail 6267 invoked by uid 0); 27 Feb 2004 12:30:24 -0000 > Received: from 62.99.146.117 by www5.gmx.net with HTTP; > Fri, 27 Feb 2004 13:30:24 +0100 (MET) > Date: Fri, 27 Feb 2004 13:30:24 +0100 (MET) > From: "peter pilsl" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="========GMXBoundary5021077885024" > Subject: testX > X-Priority: 3 (Normal) > X-Authenticated: #1267142 > Message-ID: <[EMAIL PROTECTED]> > X-Mailer: WWW-Mail 1.6 (Global Message Exchange) > X-Flags: 0001 > ========================================================== > > A second thing here is that the -H flag does not include the full headers in the > mail. Only the first received-header seems to be included.
Actually, there are two Received headers in the message you quote. Note that your own mail server's Received header won't be here, because clamav-milter rejects the infected message before Sendmail adds that header. Regards, Leonid ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
