Infected message m1KKY4eW011980 came from 127.0.0.1

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There may be a problem with the Sane security additions to ClamAV. I'm 
going to kill this feature until tomorrow, in case I'm losing real mail.
Everything I've looked at is spam, but I'm not 100% convinced as it's 
catching an *awful* lot of messages.

Vernon Webb wrote:
>
> I have had to stop MailScanner and am getting killed with SPAM. For 
> some reason I have been unable to send emails when MailScanner is 
> running, but not when Sendmail is running alone. So I have stopped 
> MailScanner and am now only running Sendmail (on a Fedora Core box). I 
> have recently upgraded MailScanner and am not sure that this is 
> related as I didn't upgrade today and today is when the problem seems 
> to have started. When I look in my logs I see this messages like a 
> million times:
>
>  
>
> Feb 20 15:34:06 ns MailScanner[10744]: ClamAVModule::INFECTED:: 
> Email.Hdr.Sanesecurity.07021900:: ./m1KKY4eW011980/
>
> Feb 20 15:34:07 ns MailScanner[10744]: Infected message m1KKY4eW011980 
> came from 127.0.0.1
>
>  
>
> Anyone have any ideas?
>
>  
>
> Vernon Webb
>
> (201) 703-1232
>
> web designs <http://www.compwiz-designs.com/> & web hosting 
> <http://www.comp-wiz.com/> by comp-wiz.com, inc.
>
> Information in this transmission is privileged & confidential. It is 
> intended for the use of the individual or entity named above. Any 
> review, dissemination, disclosure, alteration, printing, circulation 
> or transmission of this email or it's attachments is prohibited and 
> unlawful.
>
>  
>

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.0 (Build 2158)
Comment: Use Thunderbird Enigmail to verify this message
Charset: ISO-8859-1

wj8DBQFHvJwFEfZZRxQVtlQRAsx8AKDrUFexEKB5ufAwyI0il3+cZSTftwCdFVCh
UtNa2GkEfTNMmy+miCNy+eE=
=3Rr+
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.