Re: [clamav-users] Heuristics.Phishing.Email.SpoofedDomain...

2021-04-19 Thread Robert Kudyba
> Hi there, > > On Tue, 13 Apr 2021, Robert Kudyba wrote: > > > So I still don't know what "queue_id" is. > > Try the command > > mailq > > and look in the Sendmail docs. The queue ID is just the filename in > the mail queue directory without the first two characters. For each > message in the qu

Re: [clamav-users] [OT] Heuristics.Phishing.Email.SpoofedDomain...

2021-04-19 Thread G.W. Haywood via clamav-users
Hi there, On Mon, 19 Apr 2021, Robert Kudyba wrote: Thanks I found a tip that mailq -qQ works but the naming convention you posted no longer appears to match. ... It does appear the first number, "1", is the year. Correct, excepting presumably the typo in the your last example. But these me

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-19 Thread Micah Snyder (micasnyd) via clamav-users
Hi Pedro, Yes the alert you're seeing means something is unusual with the format of the JPEG that is being scanned. The intention with AlertBrokenMedia is to detect files that don't appear to follow the specification, just in case there is some vulnerability we don't know about and in case th