Stian Jordet wrote:
> tor, 27,.10.2005 kl. 13.24 +0200, skrev Ian FREISLICH:
> > I guess there are many ways to skin a cat. I prefer:
> >
> > warn message = X-Virus-Scanned: Clear (${readsocket{/var/run/cla
mav/c
> > lamd.sock}{VERSION}{2s}{}{Could not determin AV Version}})
>
> This was actually quite nice, thanks. But the time isn't right at all.
> Anyone have any idea as to why?
It's the time of you virus signature database, which is more useful.
> >From the headers of your message:
>
> X-Virus-Scanned: Clear (ClamAV 0.87/1148/Tue Oct 25 21:34:12 2005)
>
> Received: from localhost ([127.0.0.1]) by hetzner.co.za with esmtp (Exim
> 4.51 (FreeBSD)) id 1EV5ry-0008KD-H0; Thu, 27 Oct 2005 13:24:30 +0200
>
> And I have a similar oddity myself, it's off by about 6 1/2 hours...
So the virus pattern database used to scan this message on our
server is version 1148 which was compiled at the given time.
Ian
--
Ian Freislich
