[Mimedefang] Virus File getting through...

[Jim McCullars]

On Fri, 29 Feb 2008, Kevin A. McGrail wrote:

> Anyone have any thoughts about how to block this?  I think ClamAV catches it
> and I'm testing that but I'm looking for something more elegant if this
> explodes as a new delivery method.

   ClamAV definitely catches it:

   ----- Transcript of session follows -----
... while talking to smtp-in1.uah.edu.:
>>> DATA
<<< 554 5.7.1 This message will not be accepted, as it shows signs of
being infected with Trojan.Aavirus-1
554 5.0.0 Service unavailable

Jim McCullars
University of Alabama in Huntsville