Klez not silent?

Bob Fayne festus at DNSDATA.COM
Mon Apr 14 18:02:51 IST 2003


On Mon, 14 Apr 2003 12:09:29 +0100, Julian Field
<mailscanner at ECS.SOTON.AC.UK> wrote:

>Can you confirm that the batch of messages was only 1 message? If it was 2
>messages then the log lines would match what I expect. Otherwise there
>might be a bug in the Clam output parser. It was written by
><adrian at smop.co.uk>.

Here are the log lines that I neglected to include...

Apr 13 03:07:40 host MailScanner[9374]: New Batch: Scanning 1 messages,
157801 bytes
Apr 13 03:07:40 host MailScanner[9374]: Spam Checks: Starting
Apr 13 03:07:42 host MailScanner[9374]: Virus and Content Scanning:
Starting


There was only 1 message, but ClamAV indentified that one file as having 2
viruses.  I would think that it certainly could have two, but if one is
Klez then the message should be discarded.



More information about the MailScanner mailing list