Does this look right? I have been watching the full header information lately to see if mails are being scanned with purpose. Im noticing that (or what seems like) Clamav is using an older database. Here is a snippet of the header of one message......
<[EMAIL PROTECTED]>, uid 508) with qmail-scanner-1.25-st-qms (clamdscan: 0.88/1235. spamassassin: 3.0.0. perlscan: 1.25-st-qms. Clear:RC:0(220.175.180.80):SA:0(-1.2/5.0): Now what concerns me is the 0.88/1235 I have ran freshclam, as I do every evening to update with the latest database. According to Clamav's website the latest "daily.cvd" is 1288 and "main.cvd" is 35. 1235 is the (starter) "daily.cvd" that comes with the source package for ClamAV version 0.88 I have stopped and started clamd manually, and made sure that "notify" is uncommented in the freshclam.conf file. And the clamd.conf file was configured properly. So, in my estimation, it looks to be that clamdscan is not using the latest database release when qmail-scanner is invoked. Anyone have an idea on this? If you need to see snippets of log files just let me know what you need. Thanks, Sam _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
