Frank Barton wrote:
>> Ken Jones wrote:
>>> On my system, only #24 and #25 make it through ... both of
>>> which don't have a test virus in them :)
> Stefaan wrote:
>> What is stopping #5 & #17 in your configuration ? Is it clamd or
>> somethingelse ? My config  : messagewall, clamdmail, clamd, spamd and
>> numbers 5,17, 24 and 25 are getting trough :-(
> 
> I use mimedefang with clamd, and got 5, 8, 19, 22, and 23 all the way
> through
> 
> 25 got through, partially... MIMEDefang stripped off the attachment,
> but the message came through.
> 
> any hints on how to firm that up a bit?

I use MIMEDefang with clamd and clamav-milter.
All but #24, #25, and #27 were recognized as the EICAR virus and rejected.

#24 was rejected as:
MIME type message/partial not accepted here

#25 was let through, but the file was quarantined (I consider this a feature)

#27 was rejected with:
virus Exploit.Zip.ModifiedHeaders detected by ClamAV - http://www.clamav.net

-- 
Matthew.van.Eerde (at) hbinc.com                 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com         Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg," 
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to