i have a qmail server with qmail-scanner configured for qmailscan and
spamassassin.
i checked the installation with the script by qmail-scanner and worked fine.


when a mail arrives qmail-scanner calls spamassassin and clamascan, but clamscan
semmes unable to stop virus.
Some logs.
>From mail header:
Received: from [EMAIL PROTECTED] by
linux.spazio-salute.it by uid 502 with qmail-scanner-1.20rc3 
 (clamscan: 0.65. spamassassin: 2.61.  Clear:RC:0:SA:0(-2.2/5.0):. 

>From qmail-queue.log:
Tue, 10 Feb 2004 15:52:12 +0100:15277: ini_sc: start scanning
Tue, 10 Feb 2004 15:52:12 +0100:15277: ini_sc: recursively scan the directory
/var/spool/qmailscan/linux.spazio-salute.it107642473245715277/
Tue, 10 Feb 2004 15:52:12 +0100:15277: scanloop: starting scan of directory
"/var/spool/qmailscan/linux.spazio-salute.it107642473245715277"...
Tue, 10 Feb 2004 15:52:12 +0100:15277: scanloop:
scanner=clamscan_scanner,plain_text_msg=0
Tue, 10 Feb 2004 15:52:12 +0100:15277: clamscan: starting scan of directory
"/var/spool/qmailscan/linux.spazio-salute.it107642473245715277"...
Tue, 10 Feb 2004 15:52:12 +0100:15277: run /usr/local/bin/clamscan -r
--max-recursion=10 --max-space=1000000 --remove 
/var/spool/qmailscan/linux.spazio-salute.it107642473245715277 2>&1
Tue, 10 Feb 2004 15:52:12 +0100:15277: --output of clamscan was:
--
Tue, 10 Feb 2004 15:52:12 +0100:15277: clamscan: finished scan of dir
"/var/spool/qmailscan/linux.spazio-salute.it107642473245715277" in 0.34841 secs

So clamscan is correctly called by qmail-scanner but never catchs virus.

Here's freshclam log:
ClamAV update process started at Sun Dec 14 04:02:00 2003
main.cvd is up to date (version: 8, sigs: 11615, f-level: 1, builder: ddm)
daily.cvd is up to date (version: 57, sigs: 117, f-level: 1, builder: tomek)


Everything seems ok but i've been forced to stop mail with zip, exe, scr
attachments because i was receiving hundreds of virii mail.

any help appreciated,
pacho baratta




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to