The best I can figure this is an issue with either ArchiveMaxFileSize or ArchiveBlockMax, which I understand were discontinued in 0.93.
I'd like to understand what the issue is. I am unlikely to upgrade just clamav, unless there is some really major issue because such upgrades have a tendency to break other things and make general administration too time consuming. I also don't like blindly following advice. Tomasz Kojm wrote: > On Mon, 17 Nov 2008 13:05:00 -0600 > Robert Steinmetz AIA <[EMAIL PROTECTED]> wrote: > > >> For the first time a message with a .zip file attached was rejected >> >> <<< 550 This message was detected as possible malware >> (Zip.ExceededFileSize). >> >> Ubuntu 8.04 LTS >> >> Exim4 >> >> ClamAV 0.92.1/8642/Sun Nov 16 23:01:08 2008 >> >> Clamd.conf >> >> ArchiveMaxRecursion 5 >> ArchiveMaxFiles 1000 >> ArchiveMaxFileSize 10M >> >> ArchiveBlockMax >> >> >> The zip file was 2353K the messages was 3227KB. Neither number >> approached the 10MB limit listed above. >> Expanded the archived files did exceed 10MB, almost 18MB total. >> >> Why was the message rejected? >> > > Upgrade to 0.94.1 and the problem will disappear. > > -- Robert Steinmetz, AIA Principal Steinmetz & Associates _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml