Okay, thanks very much. If it continues to be an issue from that sender, I'll think about the AV Exclusion.

I've logged a bug about the message not being reprocessed when it is a requeued.   I was able to reproduce the issue with the PDF being reported as a nonscan.  The IKARUS engine is ...

Hi Arron, I tried to re-queue the message from archive, but it passes through with this message: Restricted attachment processing skipped because message was manually released from quarantine que...

Hello, let's see if I can provide some clarity. I have it working in C#. The issue is that you have to create the classes to deserialize the information. If you are familiar with the C# language, h...

According to the log the database is up to date.  It does show "Current database is 1 version behind" but then it proceeds to download an update which you can see as "Downloading database patc...

Current database is 1 version behind.

You'll need to adjust some rules in spamassassing.  URIBL provides instructions here: https://uribl.com/usage.shtml Based on what I'm reading it looks like all you should have to do is add t...

Our server shows the last update for ClamAV was today, June 5, 2023.   What does the clamav update log show is happening?  

What does the \MDaemon\SecurityPlus\Ikarus\scan.server\log\scan\scanserver.log file show happened?  The log has a size limit so it may no longer have the information.  If it does not, can...

Hi Arron, Thank you for your advice. I have followed your instructions and it appears that the query request is being blocked from their end due to exceeding a certain limit. I have already reache...

  ClamAV Virus definition stuck on 5/7/2023IKARUS definitions up to date. Am I missing an manual update?  

This is MD 19.5.9 x64 An email came in, had a PDF attachment.  For some reason, it could not be scanned and the email was quarantined.  The PDF is not password protected, so the reason i...

Can you also install WireShark and capture some outbound SMTP traffic from MDaemon and send me the capture so we can take a look at it? You can send it to arron.caruth @ mdaemon.com.  

If you run the following command in an Adminstartor powershell command prompt on the MDaemon server what is returned for the SkipAsSource value for 192.168.21.251? Get-NetIPAddress | ft IPAddress,...

We're using a sonicwall NSA2700 in High Availablility state.

We haven't been able to find anything wrong with how MDaemon is binding to an IP yet, but we are still testing. What type of firewall are you using?

If you uncheck "Enable outbound IP binding" and "This domain recognizes only connections made to these IPs" for both domains, what happens? Does the OS choose the desired IP? No change after makin...

If you uncheck "Enable outbound IP binding" and "This domain recognizes only connections made to these IPs" for both domains, what happens? Does the OS choose the desired IP? It's very suspicious ...

If you have an issue again, please get a copy of the scanserver log from the \MDaemon\SecurityPlus\Ikarus\scan.server\log\scan directory as soon as you notice the issue.  This will show us the...