Patch by Robert Scheck for MacroMilter >= 3.4, which moves the hashtable from /var/log/macromilter/ to /var/lib/macromilter/, given it is a state database, not a log file. --- MacroMilter-3.4.3/macromilter/macromilter.py 2017-10-27 14:25:57.000000000 +0200 +++ MacroMilter-3.4.3/macromilter/macromilter.py.var-lib 2017-10-30 15:22:57.864974361 +0100 @@ -110,7 +110,7 @@ # ============================================================================= LOGFILE_PATH = os.path.join(LOGFILE_DIR, LOGFILE_NAME) -HASHTABLE_PATH = os.path.join(LOGFILE_DIR, "hashtable.db") +HASHTABLE_PATH = os.path.join("/var/lib/macromilter", "hashtable.db") EXTENSIONS = ".dot",".doc",".xls",".docm",".dotm",".xlsm",".xlsb",".pptm", ".ppsm"