> My ISP (Zen Internet) has started using ClamAV. I have my > mailserver set > up to automatically forward a copy of all my mail to my > personal webmail > account. > Recently I have been getting a lot of rejections such as > > 07-Jun-07 10:54:56 0405 SMTPClient Rx: 550-Your message has been > rejected as it appears to contain malware. > 550-Our virus software (ClamAV) has identified it as > 550-'Email.Stk.Gen493.Sanesecurity.07060601'. > 550-If you are sure the file attached to your e-mail did not contain a > virus, > 550-you can report a false positive by going to the following page: > 550 http://www.clamav.net/sendvirus.html > > These are from spam emails which have been sent to me through Zen's > system so I don't understand why they are rejected when > forwarded. This > then stops all outgoing email until the offending article is removed > from the message queue manually. > > There is a spam filter facility on my mailserver (Paul Ledbury's SOHO > mailserver) but I do not use it as I prefer to sort out my own mail. > Would it be possible to direct this to ClamAV to reject potential > malware but not spam? > > I would appreciate any advice you can give me.
This isn't a ClamAV issue. Your ISP is using the SaneSecurity anti-spam definitions with ClamAV. It would seem they only scan e-mail going to webmail and not messages just passing through their servers. It would be better if their filter recognized the "infection" name as a spam infection and store it in your spam folder, but it doesn't, so you get a rejection instead. About the only thing you could do is run ClamAV with the Sane Security defs on your server and not forward anything it thinks is "infected" back to webmail. See: www.sanesecurity.com/clamav Bret _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
