I have recently noted that database signatures of 'type 4' are not always detected. (Often used to detect phishing or greeting card scams).
If I use clamscan on a file which should return a positive result, it works, but if I send that file through an e-mail to myself, it is NOT detected. I am using sendmail and mimedefang. The mimedefang is calling clamd. On another server, I'm using MPP with CommuniGate and MPP provides the interface to clamd. It behaves the same was as the sendmail server. Manual detection works, but daemon processing does not detect the type 4 signatures. Any ideas? Dan Zachary -- Dan Zachary JAARS IT Engineering 704-843-6488 800-215-7813 extension 6488 Skype: JAARS-1, JAARS-2, JAARS-3, JAARS-4 extension 6488 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html