Logwatch being marked as virus

dnsadmin 1bigthink.com dnsadmin at 1bigthink.com
Mon Aug 17 19:02:36 IST 2009

At 01:54 PM 8/17/2009, you wrote:
>The logwatch reports are coming from the localhost (same machine) and 3
>other machines.
>MailScanner is not allowing them to send the logwatch report, just marks it
>as a virus.
>FromOrTo:       root at thismachine.com yes
>From0rTo:       reports at anothermachine.com yes
>FromOrTo:       default         no
>I'm generating the logwatch report on "thismachine.com" and attempting
>To send to " reports at anothermachine.com".
>I have clamav as the virus program. The virus it is finding is part of the
>phising report info.


You are using the spam.whitelist rules, which are behaving themselves 
just fine. Use the virus scanning rules to whitelist. I had the same 
problem. Fixed!


This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the MailScanner mailing list