Steve Basford wrote: > > Alex Davidson wrote: > >> send myself EICAR test >> virus strings but firstly only 3 of the 7 tests hit my mail server, >> and secondly ClamAV doesn't detect anything, yet the next-level AV >> detects it just fine. > > I tried to send the 7 tests to my main address... only 3 arrived > > (the clean one - and 2 of the password protected one)
I received the same thing. > > My ISP probably filtered out the others. My ISP does no filtering; either the test messages were blocked at the source (ISP/webhost egress filtering) or they were never sent. As for the encrypted files, nothing can check inside an encrypted zip, but they can be blocked based on a file name inside the zip, or clamd can mark all encrypted zips by setting "ArchiveBlockEncrypted yes" in clamd.conf At any rate, this test appears useless. Find another one. -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
