Sean Pinegar wrote:
Im confused by this e-mail. Can you explain further?
When email arrives on your system a process accepts it from the mail server and submits it to clamav for scanning. Those interfaces are configurable, and one of the options is to not scan files that exceed a certain length. The reason for doing so is to prevent your AV scanner from being bogged down by huge files along with the fact that most viruses are rather small. It is not without risk, but many sites are not prepared to scan thousands of 20 mb files all day long.
If your system has such a configuration and it is set too low then ClamAV will not have scanned your file at all. It is all supposition that would require validation of your configuration, of course, but is something to consider.
dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
