one thing that I noticed/learned was that if a users machines sends an email internally (ie a virus), it misses the clam-mail-gateway and goes right to the mailserver, hence avoiding clam (I have since denied all hosts to the mailserver other than the mail-gateway to stop this)...so in a long-round-about-way, I am suggesting that maybe the email originated internally and never hit the clambox
------------------------------------------- Chris McKeever If you want to reply directly to me, please use cgmckeever--at--prupref---dot---com http://www.prupref.com Prudential Preferred Properties Chicago and Illinois NorthShore Real Estate Experts On Sat, 15 May 2004 18:26 , Steven P. Donegan <[EMAIL PROTECTED]> sent: >This was a first for me - ClamAV has been - well about as perfect as any >software could be - today one sneaked by that Norton/Symantec caught. > >Anyone else seen this - I prefer my first line of defense (ClamAV on the >server) catches everything andf the desktop stuff gets bored > > > >------------------------------------------------------- >This SF.Net email is sponsored by: SourceForge.net Broadband >Sign-up now for SourceForge Broadband and get the fastest >6.0/768 connection for only $19.95/mo for the first 3 months! >http://ads.osdn.com/\?ad_id=2562&alloc_id=6184&op=click >_______________________________________________ >Clamav-users mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/clamav-users > ---- Prudential Preferred Properties www.prupref.com Success Driven By Results Results Driven By Commitment Commitment Driven By Integrity We Are Prudential Preferred Properties