On 18.07.07 14:41, Robert Fitzpatrick wrote:
> I'm sure it did tremendously, thanks again. But WOW! Look at this one
> where the logs indicate it was scored at 4.441 as I received the
> message, but if I login as the vscan user, I get a score of 5.8...
>
> Content analysis details: (5.8 points,
It is not all that unusual to see differences in SA when run from the
command line. Have you looked at what scores are being hit on the
actual incoming message (amavisd-new log level to 2)?
Robert Fitzpatrick wrote:
On Wed, 2007-07-18 at 10:12 -0500, Craig Carriere wrote:
I use 2
On Wed, 2007-07-18 at 10:12 -0500, Craig Carriere wrote:
> I use 256K, but I have a small volume (about a thousand emails a day)
> server load. We are also experimenting with the SaneSecurity
> definitions for clam which catch a lot of this rodent mail as well and
> should lower the SA load.
>
>
I use 256K, but I have a small volume (about a thousand emails a day)
server load. We are also experimenting with the SaneSecurity
definitions for clam which catch a lot of this rodent mail as well and
should lower the SA load.
Glad it helped.
Robert Fitzpatrick wrote:
On Wed, 2007-07-18
On Wed, 2007-07-18 at 09:57 -0500, Administrator wrote:
> A rough guess and probably wrong as usual, but could the message size be
> larger than what you have set in amavisd-new? If so then SA would be
> bypassed but not when you manually test the message.
>
Ding! Thanks! It is set at 64*1024 fa
We use SA 3.1.7 with Postfix and amavisd-new 2.4.4 and clamav. I
received several PDF's this morning even though we have updated
protection. They all came from one server, so I did a lookup in the mail
logs to find 'Hits: -', that's it. After some more searching on
different servers, I see this fr
A rough guess and probably wrong as usual, but could the message size be
larger than what you have set in amavisd-new? If so then SA would be
bypassed but not when you manually test the message.
Robert Fitzpatrick wrote:
> We use SA 3.1.7 with Postfix and amavisd-new 2.4.4 and clamav. I
> recei
