FM wrote: > Tx for the reply but in my case it is not that easy. > > I am using courier-mta and courier-pythonfilter to connect the mta and > clamav > This filter is using libclamav directly > > and in clamd.conf I have : > > PhishingScanURLs no > PhishingSignatures no > > > but still have virus alert in the maillog >
Settings in clamd.conf only affect the operation of clamd/clamdscan and not the underlying library. There is no "signature" for the false-positive prone heuristic based phishing detections, so you can't fix this by manipulating the signature database. The fix will have to be made in the program that calls libclamav. -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html