On Tue, 08 Jan 2008 08:32:46 -0800 Dennis Peterson <[EMAIL PROTECTED]> wrote:
> Phil Chambers wrote: > > > > > How do I go about diagnosing this? > > Do you have log information showing that both messages followed the same path > to your > AV tool, beginning at port 25 of your inbound MTA? > > dp I have the two messages on disc and scanned them manually using clamdscan on the command line. In this situation my MTA and SMTP are not involved. clamdscan finds the signature in one file but it does not find it in the other file. Both files contain the signature and differ only in the header. The signature is in the message bod, not the header. Phil. --------------------------------------- Phil Chambers ([EMAIL PROTECTED]) University of Exeter _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
