Hi,
For some reason, the following:
warn log_message = This message contains malware ($malware_name)
message = X-FW-Warning: malware: $malware_name
malware = *
control = freeze
appears to cause all messages to be frozen, whether or not they contain
malware. Eg:
2005-02-13 14:14:49 1D0KWP-0001gO-5m <= foo@??? H=XXXX [XXXX] P=asmtp A=fixed_cram:XXXX S=13277 id=XXX
2005-02-13 14:14:49 1D0KWP-0001gO-5m frozen by ACL
Note that without "control =", only messages with malware are marked with
the header and the log message written to the log. With "control =" in
place, all messages are frozen irrespective of their content.
--
Russell King