amavisd-new result is clean but clamav manual scan result is infected

McDonald, Dan Dan.McDonald at
Fri Nov 18 17:15:47 CET 2011

On 11/18/11 1:10 AM, "Kenneth Oncinian" <kenneth.oncinian at>

> How is it possible that amavisd-new is resulting "clean" while manual
> scan of CLAMAV is resulting "infected"?

Do you have @keep_decoded_original_maps set up to scan the whole message?

@keep_decoded_original_maps = (new_RE(
  qr'^MAIL$',   # retain full original message for virus checking
  qr'^MAIL-UNDECIPHERABLE$', # recheck full mail if it contains
  qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
# qr'^Zip archive data',     # don't trust Archive::Zip

Daniel J McDonald, CCIE # 2495, CISSP # 78281

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the amavis-users mailing list