UNKNOWN CLAMD RETURN

[UxBoD]

Rick,

That is the problem as it does not get flagged by MailWatch as a Virus, which I believe just grabs the whole line from MailScanner.

Regards,
----- Original Message -----
From: "Rick Cooper" <rcooper at dwford.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Thursday, July 19, 2007 1:18:29 PM (GMT) Europe/London
Subject: RE: UNKNOWN CLAMD RETURN

 

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of UxBoD
 > Sent: Thursday, July 19, 2007 8:11 AM
 > To: MailScanner discussion
 > Subject: Re: UNKNOWN CLAMD RETURN
 > 
 > Rick,
 > 
 > SA is missing a lot of these whereas SANE is picking them 
 > up.  I have changed the code too be :-
 > 
 > if ($filename =~ /.+?\sFOUND$/ && $rest eq '') {
 >          $rest = $filename;
 >          $filename = $childname;
 >          $childname = 'header';
 >        }
 > 
 > instead of using a '.' as it may get pattern matched later on.
 > 

How did that affect the handling of the message? I was hoping either '.' or
perhaps setting childname to '' will cause MS to discard the entire message
body. I *think* a blank childname causes the "the entire body" message. Of
course as far as mailwatch goes it would flag as a virus when in fact it's
spam so it could skew your stats a bit. Try setting childname to blank and
see if it does cause MS to discard the entire body.

Rick



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.