We have had the same policy in for years and I have never had a complaint until now. We an external mail item with a password protected xlsx file and it gets discarded by puremessage. I have spent the good part of a day reading and can't find anything that solidly explains what is happening.
From what I have read puremessage treats 'unreadable' items as virus' but with the config of cantscan.conf is configured to set action as "warn". I think this is so you can different between virus and unreadable item...but how I don't know.
Running puremessage for unix.
Logs are below. Any suggestions on adding exceptions or work arounds would be appreciated.
/opt/pmx6/var/log/message_log
2013-05-28T10:42:18 q=51A3FD6A_4975_2021_1 f=<xxxxx@domainA.com.au> t=<yyyyy@gdomainB.edu.au> pmx_action=discard,-,-,yyyyy@gdomainB.edu.au,yyyyy@gdomainB.edu.au vs fur=98.136.216.147 Size=23762 v=SOPHOS_SAVI_FILE_ENCRYPTED r=nm27-vm4.bullet.mail.gq1.yahoo.com tm=0.01 a=d/eom
/opt/pmx6/var/log/pmx_log:2 2013-05-28T10:42:18 [4975,milter] 51A3FD6A_4975_2021_1: POLICY WARNING: Virus scanner was not able to scan an attachment (id=SOPHOS_SAVI_FILE_ENCRYPTED, action=warn)
/opt/pmx6/var/log/pmx_log:2 2013-05-28T10:42:18 [4975,milter] 51A3FD6A_4975_2021_1: discarded
This thread was automatically locked due to age.
