I've been hit by this also (started around 2:50pm today UK time). All the FP's are via the same MBL_349876.
I've commented out the MBL lines in the /etc/clamav-unofficial-sigs.conf file and killed all MBL sigs for now. Robert. On 21 Aug 2013, at 17:51, Andrew Beverley <a...@andybev.com> wrote: > I've also had dozens of emails blocked as false-positives in the last > hour. All are being matched as MBL_349876. > > It's not the first time I've had false positives with the MBL unofficial > list. I tried to report the last incident, but there is no contact > information on the MBL website. > > I've added: > > mbl_dbs= > > to /etc/clamav-unofficial-sigs.conf, which I am hoping will disable the > MBL list? > > Andy > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
