UNKNOWN CLAMD RETURN

[Rick Cooper]

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of UxBoD
 > Sent: Thursday, July 19, 2007 9:36 AM
 > To: MailScanner discussion
 > Subject: Re: UNKNOWN CLAMD RETURN
 > 
 > Not sure on that Rick as we do not use the reports.  In 
 > MailWatch it shows as :-
 > 
 > Clamd: message.header was infected: 
 > Email.Hdr.Sanesecurity.07061900 FOUND
 > 
 > so message.header could be changed to the word SPAM.


Do you know what happens to the message? The reason I ask is I can't
remember what MailScanner does to the message when it cannot find
$infections->{"$id"}{"$part"} in it's list of associated files (or safnames
I think). It may pass the message untouched and it may remove the entire
body I just cannot remember what the reflex would be in this situation.
Perhaps Julian can answer that. MailWatch is just looking for something to
match the regex in functions.php (IIRC) but MailScanner may end up
delivering the message and I need to make sure that doesn't happen.

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.