[clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
I started seeing a bunch of these this morning, essentially trashing around... I don't know, 80 or 90% of our mail. The signature is definitely in our database but I can't find anything about it via google aside from pages that have apparently been updated to no longer mention it. Any ideas

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Steve Basford
I started seeing a bunch of these this morning, essentially trashing around... I don't know, 80 or 90% of our mail. The signature is definitely in our database but I can't find anything about it via google aside from pages that have apparently been updated to no longer mention it. Any ideas

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
I wasn't able to receive my own post... freshclam didn't initially pull that signature back in (I removed it manually from mbl.db) so I thought we were in the clear. It eventually came back and everything came tumbling down again. Steve, replying to your post: grep MBL_207346 | sigtool

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
Oh, and I now realize that this is outside of freshclam's control, being a sanesecurity signature. I removed the mbl.db and disabled that cronjob until we sort this out... On 02/22/2012 12:51 PM, John Madden wrote: I wasn't able to receive my own post... freshclam didn't initially pull

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Bowie Bailey
On 2/22/2012 1:00 PM, John Madden wrote: Oh, and I now realize that this is outside of freshclam's control, being a sanesecurity signature. I removed the mbl.db and disabled that cronjob until we sort this out... On 02/22/2012 12:51 PM, John Madden wrote: I wasn't able to receive my own

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Steve Basford
Oh, and I now realize that this is outside of freshclam's control, being a sanesecurity signature. I removed the mbl.db and disabled that cronjob until we sort this out... Hi John, Actually, just to clarify... it's not a Sanesecurity signature and it's not distributed by Sanesecurity either,