Hi > The two things that can be done in exiscan to avoid this are: > > This unpacks before giving to clam, so a bug in the unpacker isn't > triggered: > demime = * > (or use the mime acl for this)
Nope. I HAVE acl_smtp_mime as well as demime = *, but in the /var/spool/exim4/scan/<msgID> folder there are the mime parts AS WELL AS the complete mail. Therefor the clamd unpacker is also triggered... > And this passes mail through if there's a problem with clam: > malware = */defer_ok Maybe I will try this one, but this gives me a bad feeling, as this could pass virii trough... Regards, Steffen
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users