Koozali.org: home of the SME Server

Clam AV Question [SOLVED]

Offline gbentley

  • ****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Clam AV Question [SOLVED]
« on: September 29, 2016, 12:44:32 PM »
Hi All,

Even though I have these settings for email

Virus scanning: Enabled
Spam filtering: Enabled
Executable content blocking: Enabled

I have frequently seen entries within the weekly scan log showing issues in users current mail directory. I have often wondered why this is?

Shouldn't Clam be scanning the incoming mail data stream?

« Last Edit: September 29, 2016, 02:32:13 PM by gbentley »
"If you don't know what you want, you end up with a lot you don't."

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Clam A/V Question
« Reply #1 on: September 29, 2016, 01:16:28 PM »
ClamAV signatures are updated regularily, that's why a email can pass the AV scan on arrival, but be catched on the next ClamAV scan
C'est la fin du monde !!! :lol:

Offline gbentley

  • ****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Clam A/V Question
« Reply #2 on: September 29, 2016, 01:23:03 PM »
Good point  :-)
"If you don't know what you want, you end up with a lot you don't."

guest22

Re: Clam A/V Question
« Reply #3 on: September 29, 2016, 02:03:35 PM »
[SOLVED] ? ;-)

Offline gbentley

  • ****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Clam A/V Question
« Reply #4 on: September 29, 2016, 02:31:43 PM »
Accepted Answer :-)
"If you don't know what you want, you end up with a lot you don't."

guest22

Re: Clam AV Question [SOLVED]
« Reply #5 on: September 29, 2016, 02:32:47 PM »
Please add [SOLVED] to the original post.

Offline gbentley

  • ****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Clam AV Question [SOLVED]
« Reply #6 on: September 29, 2016, 02:34:15 PM »
In air collision  :-P
"If you don't know what you want, you end up with a lot you don't."

guest22

Re: Clam AV Question [SOLVED]
« Reply #7 on: September 29, 2016, 02:34:39 PM »
Indeed, Thanks!