Hi Dave, I opened https://bugzilla.clamav.net/show_bug.cgi?id=11544 to track this issue. Can you attach your mail file(s) and pdb signature(s) the bugzilla ticket please? I'd also like to know the details of MTA you are using and whether it uses milter or the clamd protocol directly. Thanks, Steve