Matt wrote: > The MTA is qmail with simscan sitting up front calling ClamAV and > qmail-scanner on the backend calling more AV engines. That's strange, as by default Qmail-Scanner blocks Partials via the "policy block" file - /var/spool/qscan/quarantine-events.txt?
Did you disable that at some time and forget? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html