I don't think ClamAV is working right ....

So I keep having emails from constant contact put into the virus quarantine ...

When I look at the ClamAV log I see for every time a CC email is blocked:

Tue Apr 30 08:15:17 2019 -> D:\SmarterMail\Spool\SubSpool9\1581034173001.eml: SecuriteInfo.com.Spam-8755.UNOFFICIAL FOUND

So I went into my "ClamSup" config file and all the "SecuriteInfo"'s have "-"'s in front of them which is supposed to IGNORE the line ...

# SecuriteInfo securiteinfo.hdb
-http://clamav.securiteinfo.com;securiteinfo.hdb;N;Y;Y;N;N

However when I look at the clam updates file I can see:

Downloading securiteinfo.hdb [*]
securiteinfo.hdb updated (version: custom database, sigs: 284551)

So in other words, databases it is supposed to be ignoring as per the ClamSup config file it is indeed downloading and applying to incoming mail it seems ...

Any thoughts?

Employee Replied

11/20/2019 at 1:47 PM

Employee Post

Hi Joe,

I know this is a bit of an older post but I saw that you are on a newer build. Can you confirm if this is no longer an issue?

1 Reply

Reply to Thread

Related Knowledge Base Articles

1 Reply

Reply to Thread

Tags

Related Knowledge Base Articles