On 4/22/2010 10:51 AM, Thomas Herzog wrote:



Török Edwin wrote:

On 04/22/2010 10:24 AM, Török Edwin wrote:
lxhv1m02:~# grep ctl /etc/amavis/conf.d/15-av_scanners
    \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.ctl"],

You need to tell amavis to pass the entire message to ClamAV, try:
$bypass_decode_parts = 1;

I think your amavis tried to decode the message, and pass only parts of
it to ClamAV.

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml



Hello, this solution seems to lever my "banned_filename_re"-filter out.
Perhaps, there's another solution?




Find the "@keep_decoded_original_maps" section and uncomment the line with:
#  qr'^MAIL$', # retain full original message


The side effect of this is that the mail will be virus scanned twice; once for the whole message, and again each decoded part. On my machine clam is fast enough that this doesn't make a significant difference in processing time.


  -- Noel Jones

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to