> -----Original Message----- > From: Matt [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 9:19 AM > To: [EMAIL PROTECTED] > Subject: [Qmail-scanner-general]Clamscan -- any thoughts? > > > I'm using clam-av with qmail-scanner. Is anyone else STILL > haven't problems blocking the "microsoft" virus e-mail? I > seem to be catching SOME of them.. but not ALL of them. Any > idea how this could be happening? > >
clam doesnt catch the zero byte .exe ones... neither does fprot or uvscan from my testing. why?? because they are not viruses! no executable content = no detection. if you can show me one that didnt detect that have > 0bytes in the exe, i'd love to see it. use reformime to break the email down and you'll see what i'm talking about. this is normal behavior. if you dont like it, you need to find alternative means (content filtering) to block based on the content in the body. see the spamassassin-talk archives for matching these emails based on common body content. thanks, dallas ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
