On Sat, Jan 27, 2007 at 08:58:46AM +0500, Haris Khan said: > Hello, > > > I'm new to clamav. I'm running exim 4.66 and clamav (ClamAV 0.88.7/2487/Wed > Jan 24 10:53:17 2007). There are two issues at hand; > > 1) clam is not returning the name! of virus it caught in mails. Exim > has a $malware_name variable which should have it, which is coming up as > empty in exim rejectlog > 2) Below, I have copied some sample log entries I found in exim > rejectlog. Is this normal output? > > > Here is my exim.conf; > ------------------------------------------ > > av_scanner = clamd:/var/run/clamav/clamd
You have these swapped. In exim, each block of logic begins with a verb
(deny, warn, etc), so the way you have it, $malware_name will never be
expanded, because clamav is not being run there. Does any mail get
through at all? It looks like you're just flat out rejecting at DATA
right now.
well, it should be:
warn message = X-Virus-Scanner: ClamAV on $primary_hostname
# Reject all messages infected with any virus
deny message = This email is infected with ($malware_name). Please check the
system for infection.
demime = *
malware = */defer_ok
Hope that helps.
--
--------------------------------------------------------------------------
| Stephen Gran | There is only one way to console a |
| [EMAIL PROTECTED] | widow. But remember the risk. -- |
| http://www.lobefin.net/~steve | Robert Heinlein |
--------------------------------------------------------------------------
signature.asc
Description: Digital signature
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
