On May 17, 2005, at 17:24, Doug Hardie wrote:

I have been running clamav 0.82.1 for some time without any known problems. However, I finally have the time to upgrade and brought down the FreeBSD port for 0.85.1 and installed it. Everything seems to work properly except for clamav-milter logging. I had been running clamav-milter connecting to clamdscan and have now switched to clamav-milter doing it all. When using clamd there would be only one entry in clamd.log for each virus detected. Now, I am seeing 3 entries for each virus:

May 17 16:31:51 zool clamav-milter[46052]: Starting ClamAV version 0.85.1, clamav-milter version 0.85
May 17 16:32:31 zool clamav-milter[46052]: j4HNWUpC046057: /tmp/ clamav-080ef64658702e7c/msg.QPKiDh: ClamAV-Test-Signature Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]>
May 17 16:32:31 zool clamav-milter[46052]: j4HNWUpE046057: /tmp/ clamav-080ef64658702e7c/msg.E9oA85: ClamAV-Test-Signature Intercepted virus from <> to <[EMAIL PROTECTED]>
May 17 16:32:31 zool clamav-milter[46052]: j4HNWUpG046057: /tmp/ clamav-080ef64658702e7c/msg.wqGWOM: ClamAV-Test-Signature Intercepted virus from <> to <[EMAIL PROTECTED]>



Why is this occuring and is there a way to get it back to only one entry? I grep through clamd.log daily for "Intercepted virus" to generate notifications to users of the viruses intercepted.
_______________________________________________

I just noticed the last entry is to postmaster. I don't understand why that would occur. clamav-milter is running with:


-qfC

I have the f in there because its a test machine that doesn't normally handle mail so I need it to check all mail.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to