Hi

> The two things that can be done in exiscan to avoid this are:
>
> This unpacks before giving to clam, so a bug in the unpacker isn't
> triggered:
> demime = *
> (or use the mime acl for this)

Nope.
I HAVE acl_smtp_mime as well as demime = *, but in the
/var/spool/exim4/scan/<msgID> folder there are the mime parts AS WELL AS the
complete mail. Therefor the clamd unpacker is also triggered...

> And this passes mail through if there's a problem with clam:
> malware = */defer_ok

Maybe I will try this one, but this gives me a bad feeling, as this could
pass virii trough...

Regards,
  Steffen

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to