Clamd::ERROR:: after TNEF expansion.

[Mark Sapiro]

On 10/19/2016 03:47 AM, [SOLTECSIS] Carles Xavier Munyoz Baldó wrote:
> Hello,
> I have seen in my server logs that sometimes appear "Access denied"
> errors from Clamd. These errors allways appears after a TNEF archive
> expansion and these errors are always interpreted by MailScanner as if
> the escaned files were infected.


What is the mode and ownership of /var/spool/MailScanner/incoming/?

What user and group does MailScanner run as?

What user does clamd run as?

What is your setting for TNEF Expander? I.e., what does

/usr/sbin/ms-peek TNEFExpander /etc/MailScanner/MailScanner.conf

report?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan