Folks, I'm running into a weird problem and I don't know what the cause is. I'm running Qmail / Qmail-Scanner 1.22 / SA 2.63 / Clam AV 75.1
I have messages that all have the subject "Mail delivery failed", which the message scores a negative number by SA and is delivered. The problem is, each one of them contains a virus... I'm confused on why SA gives it a negative number (which doesn't show in the headers... just shows the score) and why CLAM AV isn't finding it as a virus either. Here at the headers from one of the emails: Microsoft Mail Internet Headers Version 2.0 X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0 Received: from blah.com ([removed]) by blah.com with Microsoft SMTPSVC(); Thu, 30 Sep 2004 09:27:20 -0400 Received: from removed.com ([removed]) by removed.com with Microsoft SMTPSVC(); Thu, 30 Sep 2004 09:27:18 -0400 Received: (qmail 6149 invoked by uid 511); 30 Sep 2004 09:27:13 -0400 Received: from by removed.com by uid 502 with qmail-scanner-1.22st (clamdscan: 0.75.1. spamassassin: 2.63. perlscan: 1.22st. Clear:RC:0(207.69.200.46):SA:0(-1.9/5.2):. Processed in 20.275484 secs); 30 Sep 2004 13:27:13 -0000 X-Spam-Status: No, hits=-1.9 required=5.2 Received: from unknown (HELO removed) (removed) by removed.com with SMTP; 30 Sep 2004 09:26:53 -0400 Received: from exim by removed with local (Exim 3.36 #4) id 1CD0xU-0000tT-00 for removed; Thu, 30 Sep 2004 09:26:56 -0400 X-Failed-Recipients: removed From: "Mail Delivery System" <Mailer-Daemon@ removed > To: < removed > Subject: Mail delivery failed: returning message to sender Message-ID: <E1CD0xU-0000tT-00@ removed > Date: Thu, 30 Sep 2004 09:26:56 -0400 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) removed X-Spam-Level: Return-Path: <> X-OriginalArrivalTime: 30 Sep 2004 13:27:18.0585 (UTC) FILETIME=[355D4290:01C4A6F1] Has anyone else run into this also?