[SM-USERS] virus_scan and weird SM behavior

[probsd o. <pro...@ya...>]

I have the latest stable version of SM and the lates
virus_scan plugin. Starting about an hour ago, when
attempting to login with valid username/password, the
login takes 3 minutes. At the same time, sockstat -4
reveals that the IP 67.19.66.29 connects to my
webserver on port 80. The IP address belongs to
29.67-19-66.reverse.theplanet.com which I believe is
the IP for the virus_plugin's author. It appears that
site is down, then up, then down, etc...

My question is, what is the virus_plugin doing that
requires 67.19.66.29 to connect to the login host at
login time?

When attempting to use an invalid username/password to
login to SM, this activity does not happen.

Michael

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com