Hi,
Just wondering, sometimes a mail slips through with the netsky.z variant.. clamav detects any virus, except this one, it sometimes doesn't get caught.
I'm running communigate pro with the cgpav helper on red hat9, clamav is 0.72 and freshclam runs once an hour..
Any idea why this might be? We've got a load of approx 1200msg/h. I sometimes enable the McAfee antivirus plugin (1000msg/h limit) for a limited time to see if anything gets through, so that's how I found out about this..
I attached the log, if I need to supply anything else, just let me know.. thanks..
The log conncerning the catched mail...
10:22:28.48 4 ENQUEUERRULES [7618767] rule(cgpav) conditions met
10:22:28.48 4 EXTFILTER(cgpav) out(30): 593038 FILE Queue/7618767.msg\n
10:22:28.51 4 EXTFILTER(cgpav) [7618767] header added: X-CAD-Virus-Scanned: by ClamAV 0.72
---> this indicates message is clean
10:22:28.51 4 ENQUEUERRULES [7618767] rule(MailScan) conditions met
10:22:28.51 4 EXTFILTER(McAfee) out(28): 3368 FILE Queue/7618767.msg\n
10:22:29.09 4 EXTFILTER(McAfee) inp(228): 3368 ERROR "Virus(es) found.\eBill.zip is infected with W32/[EMAIL PROTECTED]: 1\eTrojans: 0\eJokes: 0\eTests: 0\e\eCaptured by McAfee antivirus plugin
---> this indicates message is infected
10:22:29.09 1 ENQUEUERRULES [7618767] rule(MailScan) action #0: filter report: Virus(es) found.\nBill.zip is infected with W32/[EMAIL PROTECTED]: 1\nTrojans: 0\nJokes: 0\nTests: 0\n\nCaptured b
10:22:29.09 1 ENQUEUER-05([7618767]) Server rules failed: Error Code=external filter rejected the message
10:22:29.09 1 DEQUEUER [7618767] SYSTEM() failed
10:22:29.09 4 DEQUEUER [7618767] placed into empty 'immediate' queue
10:22:29.09 4 DEQUEUER-31 [7618767] processing
10:22:29.09 4 QUEUE([7618767]) closed, nOpen=14
10:22:29.09 2 QUEUE([7618767]) deleted
------------------------------------------------------- This SF.Net email is sponsored by: GNOME Foundation Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event. GNOME Users and Developers European Conference, 28-30th June in Norway http://2004/guadec.org _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
