Email.Phishing.Blackhole

[tejas sarade via amavis-users]

On Thu, Dec 12, 2013 at 2:14 PM, Sanz Moreno David <dasanz at ext.produban.com>
wrote:
>
> Thats what I say.
>
>
>
> For other blocked emails, I see the amavis log line blocking it, but
there´s no amavis line for this one

Do you have on-access scanning enabled in Clamav? What I think is that
Amavis extracted message in temporary directory for processing. And Clamav
found the suspious content in one of these extracted files and did its job.
You must check the Clamav setting.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20131212/922e3e67/attachment.html>