Hi,
Well, I need your help, I have installed a mail server with postfix and
clamav 0.87 in a Debian Sarge, the problem is that when I receive a
mail with attach of 90 mgb. Clamav put the file in quarantine, I'm sure
that the attach is clean, but I don't know why this happen, I was
thinking that is by the ArchiveMaxFileSize , but I want know if this
parameter can affect this, what happen if this is too little, obiously
not scan it, but this mean that Clamav understand that the archive is
infected?
My clamd.conf file:
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket
User clamav
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogFile /var/log/clamav/clamav.log
LogTime
LogFileMaxSize 0
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
ScanOLE2
ScanPE
DetectBrokenExecutables
ScanHTML
ArchiveBlockMax
Thanks,
Roly Morales Andrade
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
