On Mon, Mar 01, 2004 at 09:52:25PM -0500, Frank DeChellis DSL said:
> On Mon, 1 Mar 2004, Stephen Gran wrote:
> > On Mon, Mar 01, 2004 at 03:47:57PM -0500, Frank DeChellis DSL said:
> > > Hi.
> > >
> > > We are running Exim 4.2 with Exiscan and SpamAssassin on a separate
> > > server.  I just setup clamav on a separate server.
> > >
> > > How do I structure av_scanner = clamd:/var/run/clamd.ctl line in my exim
> > > configuration to use clam off another server?
> >
> > av_scanner = clamd:192.168.0.3 3310
> >
> > > What do I enter in my clamav.conf to give another server access to it?
> >
> > TCPSocket 3310

Please try ot to top-post, if your mail client makes it reasonably
feasible - it's much easier to read this way round.

> I have those settings in there but there seems to be no communication
> between the 2 units.  Is there an ACL entry for exim?

There should be.
I use (rather long):
acl_check_data:
   warn condition = ${if !def:h_Message-ID: {1}}
        hosts = +relay_from_hosts
        message = Message-ID: <[EMAIL PROTECTED]>


   deny  message = Found MIME error ($demime_reason).
      demime  = *
      condition = ${if >{$demime_errorlevel}{2}{1}{0}}

   deny  message = contains $found_extension file (blacklisted).
      demime = ade : adp : asx : bas : bat : chm : cmd : com : cpl : crt \
             : exe : hlp : hta : inf : ins : isp : js : jse : lnk : mda \
             : mdb : mde : mdt : mdw : mdz : msi : msp : mst : ops : pcd \
             : pif : prf : reg : scf : scr : shb : shs : url : vb : vbe \
             : vbs : wsc : wsf : wsh : cnf : mad : maf : mag : mam : maq \
             : mar : mas : mat : mav : maw : xnk : mhtml : msc : sct

   deny  message = This message contains a virus: ($malware_name) please scan your 
system.
      demime = *
      malware = *

   warn  message = X-Scanned-By: ClamAV at mail.lobefin.net

The imprtant line is malware = * - that sends it to the av_scanner
defined earlier.

> Is there a way to tell if the 2 systems are talking?

tcpdump comes to mind, otherwise try the logfiles.  Is there firewalling
between the two hosts?  That caused no end of problems when setting up a
sendmail server with the milter interface for me.

-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | There is more to life than increasing   |
|  [EMAIL PROTECTED]             | its speed.   -- Mahatma Gandhi          |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to