UNKNOWN CLAMD RETURN

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Rick Cooper wrote:
>  
>
>  > -----Original Message-----
>  > From: mailscanner-bounces at lists.mailscanner.info 
>  > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
>  > Behalf Of UxBoD
>  > Sent: Thursday, July 19, 2007 8:11 AM
>  > To: MailScanner discussion
>  > Subject: Re: UNKNOWN CLAMD RETURN
>  > 
>  > Rick,
>  > 
>  > SA is missing a lot of these whereas SANE is picking them 
>  > up.  I have changed the code too be :-
>  > 
>  > if ($filename =~ /.+?\sFOUND$/ && $rest eq '') {
>  >          $rest = $filename;
>  >          $filename = $childname;
>  >          $childname = 'header';
>  >        }
>  > 
>  > instead of using a '.' as it may get pattern matched later on.
>  > 
>
> How did that affect the handling of the message? I was hoping either '.' or
> perhaps setting childname to '' will cause MS to discard the entire message
> body. I *think* a blank childname causes the "the entire body" message. Of
> course as far as mailwatch goes it would flag as a virus when in fact it's
> spam so it could skew your stats a bit. Try setting childname to blank and
> see if it does cause MS to discard the entire body.
>   
Generating a virus report on "" will cause the entire message to be 
treated as infected.

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGn6gOEfZZRxQVtlQRAgppAJ4xhh5/GeWuTZ8imMjWMP+RDI5MKwCfS4eH
GDX5ZDEXMPaKkqw5hM+4N/c=
=pm9d
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk