I'm stumped...

What difference does clamdscan see when invoked from clamav-milter
and when invoked via mimedefang ?

I'm using the stock mimedefang-filter

I've just converted from running spamass-milter + clamav-milter
to mimedefang (running all three at first, to ensure things are
working).

I've now removed spamass-milter as the mimedefang integration is
workin well in that regard.

I've not been able to remove the subsequent clamav-milter as of yet
because it is catching viruses that it doesn't when invoked by
mimedefang ?!?

The mimedefang->clamdscan *is* catching some, just not (for the nonce)
some of the attempts:
        Worm.Mydoom.M, Worm.SomeFool.Gen-1, Worm.SomeFool.Gen-2
so I'm left thinking that even though mimedefang and clamdscan are
running different uids, there shouldn't be a permissions issue.

Specifically:
                <--- the mimedefang -> clamdscan call --- >
sm-mta[5001]: i74EJus5005001: Milter add: header: X-Scanned-By:
MIMEDefang 2.43

                <--- the mimedefang -> clamdscan call --- >
sm-mta[5001]: i74EJus5005001: Milter add: header: X-Virus-Scanned: clamd
/
ClamAV version 0.75-1, clamav-milter version 0.75c\n\ton
ultima-thule.cavein.org
sm-mta[5001]: i74EJus5005001: Milter add: header: X-Virus-Status:
Infected
clamav-milter[3441]: i74EJus5005001: stream: Worm.Mydoom.M Intercepted
virus
from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]>

and:
clamav-milter[3441]: i72CqL7u027433: stream: Worm.SomeFool.Gen-2
Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]>


Environment:
Linux                   2.6.8-rc (Debian unstable)
glibc                   2.3.2
sendmail                8.13.1
mimedefang              2.44
spamassassin                    3.0.0pre4
clamav                  0.75.1


-- 
Rick Nelson
<dhd> perl < /dev/bdsm
<knghtbrd> you have a /dev/bdsm?
<dhd> sure, it's a pseudosadomasochistic random number generator


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to