bad header pass not scanned?

Maurizio Marini maumar at datalogica.com
Thu Dec 17 14:51:56 CET 2015


Hello
sorry if this is a lame question

I have an amavis with 
$final_bad_header_destiny = D_PASS;
in this case a message like this one:
Dec 17 13:10:36 mailgw2 amavis[12655]: (12655-09) Passed BAD-HEADER-2
{RelayedOpenRelay,Quarantined}, [95.227.126.147]:55086 [95.227.126.147].....
is not scanned by clamav?
In this case, how can force to to have it scanned by clamav, even if it
contains bad header?

===================================================
The issue was that this message was relayed to a zimbra server behind it, and
zimbra amavis+clamav detected a virus inside it:

A virus was found: Suspect.DoubleExtension-zippwd-15

Bad header:
  Non-encoded 8-bit data (char B9 hex): Subject: Pagamento \271 70957 del
    19/1[...]
Scanner detecting a virus: ClamAV-clamd

Content type: Virus
Internal reference code for the message is 17886-18/huDkBiERE6xT

First upstream SMTP client IP address: [37.59.65.24]
  mailgw2.idc2.adatacenter.net
According to a 'Received:' trace, the message apparently originated at:
  [95.227.126.147], [192.168.100.201] 62.162.146.42
====================================================

-m
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5772 bytes
Desc: not available
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20151217/fd603adb/attachment.bin>


More information about the amavis-users mailing list