Hi,
I am running a FreeBSD server with spamassassin and clamav 0.73
installed, and using procmail to filter mail delivered to local users.
Any mail tagged by spamassassin or detected by clamav is delivered to a
a spam mailbox. My procmail recipe is pretty much the standard
installations and looks like this:
## BEGIN ClamAV Scanning Block: edits inside this block may be
## reverted at upgrade. Edit at your own risk!
TMPLOGFILE=$LOGFILE
TMPLOGABSTRACT=$LOGABSTRACT
TMPVERBOSE=$VERBOSE
LOGFILE=/tmp/clamav.log
LOGABSTRACT=all
VERBOSE=off
NL="
"
:0
CLAMAV=|/usr/local/bin/clamdscan --disable-summary --stdout --mbox -
:0
* CLAMAV ?? .*: \/.* FOUND
{
LOG="Possible virus ${MATCH}${NL}"
:0 fhw
| formail -a"X-ClamAV: ${MATCH}"
}
:0E fhw
| formail -a"X-ClamAV: clean"
:0
* ^X-ClamAV: \/.*
* ! MATCH ?? ^^clean^^
/var/mail/spam
LOGFILE=$TMPLOGFILE
LOGABSTRACT=$TMPLOGABSTRACT
VERBOSE=$TMPVERBOSE
The problem I am having is that every 3-4 weeks or so a file named
clamav file appears in /var/mail/ and uses up all the available
diskspace(over 1GB). I have not configured anything to write to this
file (eg. cron or procmail) and if deleted it reappears a few weeks
later and causes the same problem. The normal disk usage is around
9-10%, when this file appears it knocks this up to 100%. The file
suddenly appears, it does not slowly get larger and larger.
Has anyone come across this file and know what its for? I tried to open
it but it was too large for pico to view.
Thanks in advance for any help anyone on this list can give me.
Regards
Richard Saddington
Strange Corporation Ltd.
[t] 01202 303130
[f] 01202 309677
[e] [EMAIL PROTECTED]
[w] http://www.strangecorp.com
This communication contains information, which is confidential, and is
for the exclusive use of the addressee(s). If you are not a named
addressee please contact the sender immediately, and also delete the
communication from your system.
Internet communications are not secure and therefore Strange Corporation
Ltd does not accept legal responsibility for the contents of this
message. Any views or opinions presented are solely those of the author
and do not necessarily represent those of Strange Corporation Ltd unless
otherwise specifically stated.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.717 / Virus Database: 473 - Release Date: 08/07/2004
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
