----- Original Message -----
From: "Dennis Peterson" <[EMAIL PROTECTED]>
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Sent: Wednesday, March 14, 2007 9:40 PM
Subject: Re: [Clamav-users] 0.90.1 not finding viruses
John Fleming wrote:
I just realized to my horror that clamav has not found a virus in any
email handled by my server since March 5th when I upgraded to clamav
0.90.1. The messages are being tagged appropriately, e.g.:
X-Virus-Status: No
X-Virus-Checker-Version: Luke wa9als.com running clamassassin 1.2.1 with
ClamAV 0.90.1/2839/Wed Mar 14 05:24:32 2007 signatures 42.
- And the clamav log is free of errors and indicated that the database is
updated appropriately and clamd is being notified of changes. Since I
usually see viruses daily, I can't believe that there have simply been no
viruses since March 5th!
Thoughts please? Thanks - John
Is there a clamassassin log? 42 signatures is very small - something is
wrong with that. Run clamconf and check the report against your
clamassassin configuration and what you believe the configuration should
be.
No, there's no clamassassin log. clamconf gives the proper data. I sent
myself the eicar test and it was detected and filed in the virus IMAP folder
as expected. However, there is no evidence of this in the clamav lag!
I upgraded my clamassassin - I had manually updated an older one so that
clamd would be correctly notified of database updates. This really doesn't
pertain to what we're talking about it, but mention it to be complete and
because the headers are different now - missing the number of signatures
altogether. HOwever, the clamav log indicates that 90-some thousand
signatures are correctly loaded. Not sure why it's not 200-some thousand
like yours...
I know from past experience that EICAR should get logged in clamav log
unless something's changed!
Any other thoughts about this? - John
X-Virus-Status: Yes
X-Virus-Report: Eicar-Test-Signature FOUND
X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV
0.90.1/2839/Wed Mar 14 05:24:32 2007
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
