Hi,
You have presumable not given exim the full path to the socket. It is also possible that you have not given exim read permission on the path to the socket.
for clamd I get the following error: 2007-03-11 17:10:18 1HQQck-0002cX-5z malware acl condition: clamd: unable to read from socket (No such file or directory) I have the following configuration. in clamd.conf LocalSocket /tmp/clamd AllowSupplementaryGroups yes #TCPAddress #TCPSocket in exim.conf: av_scanner = clamd:/tmp/clamd $ ls -al /tmp/clamd returns srwxrwxrwx 1 clamav clamav 0 Mar 11 17:04 /tmp/clamd and in /etc/group mail:x:12:postfix,clamav (mail is the owner of exim process) I feel every thing is fine, but it does not work. How can I get more detailed log? I turned on the verbose mode for logging in clamd.conf but in /tmp/clamd.log there is not much info?
This one works for me: av_scanner = cmdline:/usr/bin/clamscan -i --unrar --unarj --unzoo --lha --tar --tgz %s:FOUND: :: (.+) FOUND
No, I do not get any error but the eicar virus is not caught and the email is sent to inbox. How can I check what happens in this virus test of clamscan? /var/log/mail, /var/log/exim/main.log, /tmp/clamd.log include nothing for this clamscan. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
