efa-project.org

Posted: **17 Aug 2016 08:13**

hi all,
i last days more and more virus mails getting through.
one example:

Clamd: message was infected: Heuristics.OLE2.ContainsMacros ,Clamd: business_deal_1765.doc was infected: Heuristics.OLE2.ContainsMacros Sophos: >>> Virus 'Troj/DocDl-L' found in file ./C17F1100041.A8FAD/business_deal_1765.doc

this mail was delivered

do i have some conf errors?

Code: Select all

Virus Scanning yes 
Virus Scanners clamd sophos 
Virus Scanner Timeout 300 
Deliver Disinfected Files no 
Silent Viruses HTML-IFrame All-Viruses 
Still Deliver Silent Viruses yes
Deliver Cleaned Messages yes 
Deliver Disinfected Files no 
Quarantine Infections yes 
Quarantine Silent Viruses yes 
Quarantine Modified Body yes 
Quarantine Whole Message yes 
Quarantine Whole Messages As Queue Files no 
Keep Spam And MCP Archive Clean no

Posted: **21 Aug 2016 16:15**

Interesting....

Your config looks okay at first glance.

So the mail and the attachment were delivered?

What does the report on the message look like?

Posted: **23 Aug 2016 14:11**

see image..

Posted: **23 Aug 2016 22:46**

I wonder if something is up with both clamd and sophos running together?

efa-project.org

Virus Mail not being cleaned

Virus Mail not being cleaned

Re: Virus Mail not being cleaned

Re: Virus Mail not being cleaned

Re: Virus Mail not being cleaned