hi i'm a newbie.
I have this problem:
i send an e-mail with attached the file EICAR.COM but the clamav don't stop it.
Why?
I use postfix-2.0.9, amavis-0.3.12, clamav-0.54, pavcl 6.
This is my maillog.
Jun 21 19:57:18 principal postfix/postfix-script: starting the Postfix mail
system
Jun 21 19:57:18 principal postfix/master[1124]: daemon started -- version 2.0.9
Jun 21 20:00:19 principal postfix/smtpd[1366]: connect from
principal.corallo.it[192.168.0.1]
Jun 21 20:00:20 principal postfix/smtpd[1366]: 70A68A9B9:
client=principal.corallo.it[192.168.0.1]
Jun 21 20:00:20 principal postfix/cleanup[1368]: 70A68A9B9:
message-id=<[EMAIL PROTECTED]>
Jun 21 20:00:20 principal postfix/smtpd[1366]: disconnect from
principal.corallo.it[192.168.0.1]
Jun 21 20:00:21 principal postfix/qmgr[1136]: 70A68A9B9:
from=<[EMAIL PROTECTED]>, size=1020, nrcpt=1 (queue active)
Jun 21 20:00:29 principal amavisd[1371]: starting. amavis 0.3.12 Sun May
25 07:20:37 CEST 2003
Jun 21 20:00:29 principal amavisd[1371]: Extracting mime components
Jun 21 20:00:29 principal amavisd[1371]: Level: 1, parts: 2
Jun 21 20:00:29 principal amavisd[1371]: Archive nesting depth: 0
Jun 21 20:00:29 principal amavisd[1371]: File-type of msg-1371-1.txt: ASCII
text, with no line terminators
Jun 21 20:00:29 principal amavisd[1371]: msg-1371-1.txt is atomic
Jun 21 20:00:29 principal amavisd[1371]: File-type of msg-1371-2.EXE: ASCII
text
Jun 21 20:00:29 principal amavisd[1371]: msg-1371-2.EXE is atomic
Jun 21 20:00:29 principal amavisd[1371]: Using clamav
Jun 21 20:00:32 principal amavisd[1371]:
/var/amavis/amavis-14392938/parts/msg-1371-1.txt: OK
/var/amavis/amavis-14392938/parts/msg-1371-2.EXE: OK ----------- SCAN
SUMMARY ----------- Known viruses: 7286 Scanned directories: 1 Scanned
files: 2 Infected files: 0 Data scanned: 0.00 Mb I/O buffer size: 131072
bytes Time: 2.594 sec (0 m 2 s)
Jun 21 20:00:32 principal amavisd[1371]: Using clamd
Jun 21 20:00:32 principal amavisd[1371]: Virus scanner failure: Clamd -
can't connect to daemon
Jun 21 20:00:32 principal amavisd[1371]: Using /usr/bin/pavcl
Jun 21 20:00:35 principal amavisd[1371]: Gracias por seleccionar Panda
Antivirus. Esta versión es SHAREWARE y exclusiva para propósitos de
evaluación. Puede ser utilizada durante 30 días para determinar si reune
los requisitos que Vd. necesita. Pasado este plazo, deberá comprarlo o
borrarlo de su PC. CENTRAL Panda Software Buenos Aires 12 48001
BILBAO Tfno. 34-94-425 11 00 FAX 34-94-424 46 97
E-mail [EMAIL PROTECTED] (C) Panda Software International
2001 Pulse una tecla para
continuar...^@
Panda Antivirus For Linux 6.0, Panda Software 1989-2000 Nº de
virus y mutaciones detectables: 57582 Ultima revisión del fichero de virus:
14/03/2001 /var/amavis/amavis-14392938/parts/msg-1371-1.txt2.EXE Tiempo
empleado en el análisis......: 0:00'00" Número de ficheros
analizados.......: 2 Número de ficheros infectados.......:
0 Copyright Panda
Software ^[
Jun 21 20:00:36 principal postfix/smtpd[1378]: connect from
localhost.localdomain[127.0.0.1]
Jun 21 20:00:36 principal postfix/smtpd[1378]: A2CC3A9C0:
client=localhost.localdomain[127.0.0.1]
Jun 21 20:00:36 principal postfix/cleanup[1368]: A2CC3A9C0:
message-id=<[EMAIL PROTECTED]>
Jun 21 20:00:36 principal postfix/smtpd[1378]: disconnect from
localhost.localdomain[127.0.0.1]
Jun 21 20:00:36 principal amavisd[1371]: do_exit:436 - ending execution with 0
Jun 21 20:00:36 principal postfix/qmgr[1136]: A2CC3A9C0:
from=<[EMAIL PROTECTED]>, size=1246, nrcpt=1 (queue active)
Jun 21 20:00:36 principal postfix/pipe[1370]: 70A68A9B9:
to=<[EMAIL PROTECTED]>, relay=vscan, delay=16, status=sent
(principal.corallo.it)
Jun 21 20:00:37 principal postfix/local[1379]: A2CC3A9C0:
to=<[EMAIL PROTECTED]>, relay=local, delay=1, status=sent
("|/usr/bin/procmail")
Jun 21 20:00:58 principal ipop3d[1390]: pop3 service init from 192.168.0.1
Jun 21 20:00:59 principal ipop3d[1390]: Login user=postfix
host=principal.corallo.it [192.168.0.1] nmsgs=0/0
Jun 21 20:00:59 principal ipop3d[1390]: Logout user=postfix
host=principal.corallo.it [192.168.0.1] nmsgs=0 ndele=0
Jun 21 20:01:00 principal ipop3d[1391]: pop3 service init from 192.168.0.1
Jun 21 20:01:00 principal ipop3d[1391]: Login user=portatile
host=principal.corallo.it [192.168.0.1] nmsgs=1/1
Jun 21 20:01:01 principal ipop3d[1391]: Logout user=portatile
host=principal.corallo.it [192.168.0.1] nmsgs=0 ndele=1
Jun 21 20:01:01 principal ipop3d[1394]: pop3 service init from 192.168.0.1
Jun 21 20:01:02 principal ipop3d[1394]: Login user=ale
host=principal.corallo.it [192.168.0.1] nmsgs=0/0
Jun 21 20:01:02 principal ipop3d[1394]: Logout user=ale
host=principal.corallo.it [192.168.0.1] nmsgs=0 ndele=0
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
