virus

  1. K

    Virus durch clamav erkannt aber nicht gefiltert.

    Hallo, ich habe jetzt den seltsamen Fall, dass eine (identifizierte) Phishing-Mail durchkam und nicht gefiltert wurde. Hier die entscheidenden Header-Zeilen: Oct 9 14:52:00 mailgw01 pmg-smtp-filter[32779]: 2141E6523F7707357F: virus detected: Heuristics.Phishing.Email.SpoofedDomain (clamav) Oct...
  2. S

    Nasty virus with an empty sender e-mail

    Hello! Today several users recieved an email with an empty sender and attached file 3282023.gz with 3282023.scr inside, I'm pretty sure it is a virus, because nobody really use or send screensavers anymore. :) I already set backscatter score to 3, but I guess it will also quarantine all...
  3. K

    detect one-note attachment abuse (malware)

    Hi, We are witness of one-Note attachment with .one file extension which execute payload using cmd & Power-shell when user tryied to open it from MS Outlook mail client. Can we detect & Block abuse contain inside of any one-note / document at Email Gateway ? We have remove attachment rule for...
  4. B

    How can I see why a virus was not detected ?

    Hi, I received a virus file with a .xz extension (a compressed file apparently) It was not blocked by ClamAV, all logs files of clamav are empty even if the virus filter is actived. For spam I can easily see in the original mail why it is blocked / not blocked but how can I do that for virus...
  5. S

    [SOLVED] Spam Quarantine master and slave didn't match

    Hello everybody, I've been checking on my cluster hardisk consumption and found that there is a significant different on Master and all slave server. Further check, I found that there is a different stored file inside /var/spool/pmg/cluster on Master and slave server. Here is from slave...
  6. 3

    Viewing Quarantined attachments?

    Hi everyone, I'm looking into implementing PMG for our business, currently in the testing stages. I have a quick question that I've not been able to find an answer too. Is there a way to view/download quarantined email attachments so they can be investigated further? This would be really...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!