Jan Pieter Cornet wrote:
Maybe "tons" is slightly exaggerated? Out of approximately 10 million emails today, our logs show one hit for XF.Sic.L, and then another hit when that email was bounced because of the reject we gave.
If their customer is trying repeatedly to send "a bunch" of files that trigger false positives on that rule, then yes, they're going to see "tons" of them -- regardless of the number of hits in anyone else's logs.
-- Kelson Vibber SpeedGate Communications <www.speed.net> _______________________________________________ http://lurker.clamav.net/list/clamav-users.html