> The mails that cause this always come from the same group of sites. > I've also found that it happens if I turn on full headers in the virus > reports. > This doesn't happen on a 4.23-11 on rh7.2 box that I'm retiring. > > Uly > Turns out it was the MTA using a funny charset, O DefaultCharSet=iso-8859-1 in the sendmail.cf sorted it.