amavis-user November 2011 archive
| Main Archive Page > Month Archives > amavis-user archives |
Re: amavisd-new result is clean but clamav manual scan result is infected
From: McDonald, Dan <Dan.McDonald_at_nospam>Date: Fri Nov 18 2011 - 16:15:47 GMT
To: "amavisd" <amavis-users@amavis.org>
On 11/18/11 1:10 AM, "Kenneth Oncinian" <kenneth.oncinian@ph.panasonic.com>
wrote:
> How is it possible that amavisd-new is resulting "clean" while manual
> scan of CLAMAV is resulting "infected"?
Do you have @keep_decoded_original_maps set up to scan the whole message?
@keep_decoded_original_maps = (new_RE(
qr'^MAIL$', # retain full original message for virus checking
qr'^MAIL-UNDECIPHERABLE$', # recheck full mail if it contains
undecipherables
qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
# qr'^Zip archive data', # don't trust Archive::Zip
));
-- Daniel J McDonald, CCIE # 2495, CISSP # 78281