Hi,
server: Debian 3.1 Sarge MTA: postfix with amavisd-new it uses clamscan
when i manually scan the files in the quarantine i use only: clamscan --detect-broken /var/virusmails/virus*
Example:
mx3:/var/virusmails# clamscan --detect-broken virus-20050320-053120-05268-10
virus-20050320-053120-05268-10: OK
from the mail log file:
Mar 20 05:31:29 localhost amavis[5268]: (05268-10) Blocked INFECTED (Joke.AddRemove), [195.111.64.216] [195.111.64.216] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine: virus-20050320-053120-05268-10, Message-ID: <[EMAIL PROTECTED]>, Hits: -, 8290 ms
as you can see above when mail arrived it found that Joke.AddRemove but when i manually scan it couldn't.
hope theese help to get a solution,
thanx,
aladar
----- Original Message -----
Róth Tamás wrote:
Hi all,
i have a small problem, when a mail arrives with infection clamav finds it and moves it to /var/virusmails but if i do a clamscan /var/virusmails/virus* on some files it said to be OK, right now i'm working on to pipe all infected mail traffic to a database, but it gives false info if many of the files detected clean when checking the saved files.
Which MTA and scanning software? Also, which options are you calling clamscan with?
The more info you supply regarding your setup/methods, the less psychic guesswork will be involved.
Matt _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
