>OK, let me be completely explicit. You want both >Debug >Foreground >in clamd.conf. Start a single instance of the milter (by hand - no init >script that may daemonize the milter or otherwise hide output from you)=20 >on an otherwise quiescent machine. Send an email with the false negative.
Ok. With both Debug and Foreground set I am now getting debugging output. Yay! I don't have a quiescent machine, but I was able to catch a sample pretty quickly (since I get so many of them). The false positive mail and the full log file are here: http://www.acme.com/jef/tmp/cl/ The relevant log entries start around line 819, or you can just search for the from-address of the sample, "[EMAIL PROTECTED]". I don't see anything weird in the debug output, but maybe you will. --- Jef Jef Poskanzer [EMAIL PROTECTED] http://www.acme.com/jef/ _______________________________________________ http://lurker.clamav.net/list/clamav-users.html