> > > > I'm getting false positives with > > Html.Phishing.Auction.Gen009.Sanesecurity.06020102 > > > > Marking legit eBay communications as Phish; bid confirmations, outbid > > notices, "you won" notices. > > > Okay, I've disabled this sig and re-uploaded... that should fix it until > i can find sample email. > > One thing about that sig, is that it was using multiple matches.. but I > did test without any problems... hmmm. > > Out of interest... could you email me a header from the false positive > email? > If you can, steveb_clamav ATT sanesecurity DOTT COMM
I can verify it blocks legitimate mail from Ebay (outbidnotice and endofitem). I cannot provide samples for obvious reasons. dp _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
