Hi,

I have recently installed clamav-milter on CentOS with this guide:
---
# HOWTO install clamav-milter on CentOS & BQ to work with sendmail.
# this assumes f-prot and MailScanner are installed also.


# check that MILTER support is build into sendmail:
sendmail -d0 < /dev/null | grep MILTER
# If MILTER support is already enable, this will show the following like
message,
# DNSMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7


# Check that MILTER library "libmilter*" is installed.
whereis libmilter

# if NOT, then get sendmail-$version.tar.gz from www.sendmail.org.
# current sendmail version is 8.13.1 at 20060605 on BQ
tar zxvf /usr/local/download/sendmail-8.13.1.tar.gz
cd sendmail-8.12.11
cd libmilter
sh Build install

# check again for libmilter:
whereis libmilter


# create dag.repo in /etc/yum.repos.d/ and fill it with:
[dag]
name=Dag Wieers
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgkey=http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
gpgcheck=1
enabled=0


# install clamav and clamav-milter
yum --enablerepo dag install clamav clamav-milter

# /etc/freshclam.conf should have as follows:
LogSyslog
LogFacility LOG_MAIL
DatabaseMirror db.il.clamav.net
DatabaseMirror db.us.clamav.net
DatabaseMirror db.local.clamav.net


# update signatures:
/usr/bin/freshclam


# edit /etc/mail/sendmail.mc and append:
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clmilter.sock, F=,
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clmilter')


# rebuild sendmail.cf and restart MailScanner:
make sendmail.cf
service MailScanner restart


# edit /etc/sysconfig/clamav-milter and check that it has as same path to
socket as sendmail.mc


# /etc/clamd.conf should have as follows (also adjust attachments size):
LogFile /var/log/clamav/clamd.log
LogTime
LogSyslog
LogFacility LOG_MAIL
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /tmp
LocalSocket /var/run/clamav/clmilter.sock
#TCPSocket
#TCPAddr
ScanMail
ScanHTML
ScanArchive
ScanRAR


# check that clamd and clamav-milter are starting on boot:
chkconfig --list clamd
chkconfig --list clamav-milter


# if not, then:
chkconfig clamd on
chkconfig clamav-milter on


# start clamd:
service clamd start


# start clamav-milter:
service clamav-milter start


# watch /var/log/maillog and /var/log/clamd.log
---

The I disabled AV on my laprtop and sent EICAR string to myself.

And I got it!

Neither maillog nor clamd.log notice anything.

Is something wrong with my setup? How could I make it scan?



Best,

--
Arthur Sherman

+972-52-4878851
CPTeam 

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to