> > > > > No, it makes reporting based only on headers pointless.
When you are referring to headers, are you talking about headers in the actual virus e-mail? I don't have those as they have been deleted. I am looking at the sever communications my smtp logs. Derek Lamparty _______________________________________________ http://lurker.clamav.net/list/clamav-users.html