amavisd-new result is clean but clamav manual scan result is infected

[McDonald, Dan]

On 11/18/11 1:10 AM, "Kenneth Oncinian" <kenneth.oncinian at ph.panasonic.com>
wrote:

> How is it possible that amavisd-new is resulting "clean" while manual
> scan of CLAMAV is resulting "infected"?


Do you have @keep_decoded_original_maps set up to scan the whole message?

@keep_decoded_original_maps = (new_RE(
  qr'^MAIL$',   # retain full original message for virus checking
  qr'^MAIL-UNDECIPHERABLE$', # recheck full mail if it contains
undecipherables
  qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
# qr'^Zip archive data',     # don't trust Archive::Zip
));



-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20111118/0fe9b999/attachment.html>