Folks,
I'm running into a weird problem and I don't know what the cause is.
I'm running Qmail / Qmail-Scanner 1.22 / SA 2.63 / Clam AV 75.1
I have messages that all have the subject "Mail delivery failed", which the
message scores a negative number by SA and is delivered.
The problem is, each one of them contains a virus... I'm confused on why SA
gives it a negative number (which doesn't show in the headers... just shows
the score) and why CLAM AV isn't finding it as a virus either.
Here at the headers from one of the emails:
Microsoft Mail Internet Headers Version 2.0
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
Received: from blah.com ([removed]) by blah.com with Microsoft SMTPSVC();
Thu, 30 Sep 2004 09:27:20 -0400
Received: from removed.com ([removed]) by removed.com with Microsoft
SMTPSVC(); Thu, 30 Sep 2004 09:27:18 -0400
Received: (qmail 6149 invoked by uid 511); 30 Sep 2004 09:27:13 -0400
Received: from by removed.com by uid 502 with qmail-scanner-1.22st
(clamdscan: 0.75.1. spamassassin: 2.63. perlscan: 1.22st.
Clear:RC:0(207.69.200.46):SA:0(-1.9/5.2):. Processed in 20.275484 secs); 30
Sep 2004 13:27:13 -0000
X-Spam-Status: No, hits=-1.9 required=5.2
Received: from unknown (HELO removed) (removed) by removed.com with SMTP;
30 Sep 2004 09:26:53 -0400
Received: from exim by removed with local (Exim 3.36 #4) id 1CD0xU-0000tT-00
for removed; Thu, 30 Sep 2004 09:26:56 -0400
X-Failed-Recipients: removed
From: "Mail Delivery System" <Mailer-Daemon@ removed >
To: < removed >
Subject: Mail delivery failed: returning message to sender
Message-ID: <E1CD0xU-0000tT-00@ removed >
Date: Thu, 30 Sep 2004 09:26:56 -0400
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) removed
X-Spam-Level:
Return-Path: <>
X-OriginalArrivalTime: 30 Sep 2004 13:27:18.0585 (UTC)
FILETIME=[355D4290:01C4A6F1]
Has anyone else run into this also?
