Clam update problems

Kevin Kobb kkobb at
Tue Aug 7 20:44:41 IST 2012

Yes, MBL_303159 was the one I seemed to be seeing and I had a local.ign2
that I added it too. I hadn't heard of a ignoresigs.ign2 file before, so
I assume they are equivalent?


-----Original Message-----
From: mailscanner-bounces at
[mailto:mailscanner-bounces at] On Behalf Of Steve
Sent: Tuesday, August 07, 2012 2:39 PM
To: MailScanner discussion
Subject: Re: Clam update problems

> Has anybody been having problems with ClamAV updates that came out
> today?
> I started getting a bunch of false positives and errors this morning,
> and finally had turn of virus scanning in MailScanner.conf to get
> messages to flow.

If you are using unofficial sigs...

Just had a report that MBL_303159 is giving mass FP's (a bad signature)

SO, if you are using MBL ones... something like this will help...

printf > ignoresigs.ign2 MBL_303159
copy the ignoresigs.ign2 file to clamav db directory and restart clamd

As the MBL ones aren't distributed or produced by me, I can't really do
much more that add an updated .ign2 file to the mirrors :(



MailScanner mailing list
mailscanner at

Before posting, read

Support MailScanner development - buy the book off the website! 

More information about the MailScanner mailing list