Hello again, I managed to solve this problem by myself. I came across the following post on the Norman forum: http://forum.norman.com/viewtopic.php?t=165
The Norman part of amavisd.conf should read as follows: ### http://www.norman.com/products_nvc.shtml ['Norman Virus Control v5 / Linux', 'nvcc', '-c -l:0 -s -u -temp:$TEMPBASE {}', [0,10,11], [1,2,14], qr/(?i).* virus in .* -> \'(.+)\'/ ], Indeed this has several error levels added. According to the norman forum this has been fixed upstream already. Kind regards, Jelmer Jaarsma -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]