> ----------------------------- > > Message: 29 > Date: Thu, 7 Aug 2008 21:50:52 -0700 > From: Jeff Weinberger <[EMAIL PROTECTED]> > Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify it's > working? > To: clamav-users@lists.clamav.net > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes > > Hi: > > Pardon me if this is obvious - I'm new to both Dspam and ClamAV. > > I built Dspam with --enable-clamav, ensured that: dspam.conf has: > > ClamAVPort 3310 > ClamAVHost 127.0.0.1 > > and clamd.conf has: > > TCPSocket 3310 > TCPAddr 127.0.0.1 > > I see (from the headers) that mail messages coming in to my server > have been scanned by Dspam, but there's no indication in those headers > that it has also been scanned by ClamAV. > > Is there any way for me to be sure the configuration is working? > > Thank you for any help, suggestions, or pointers! > > System: > Mac OS/X 10.5.4 (intel, client) > Postfix MTA with Dspam specified as the content_filter > What other specifics might be helpful? > > > > ------------------------------ > > Message: 30 > Date: Thu, 07 Aug 2008 22:14:54 -0700 > From: Dennis Peterson <[EMAIL PROTECTED]> > Subject: Re: [Clamav-users] Using ClamAV with Dspam - how do I verify > it's working? > To: ClamAV users ML <clamav-users@lists.clamav.net> > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Jeff Weinberger wrote: >> Hi: >> >> Pardon me if this is obvious - I'm new to both Dspam and ClamAV. >> >> I built Dspam with --enable-clamav, ensured that: dspam.conf has: >> >> ClamAVPort 3310 >> ClamAVHost 127.0.0.1 >> >> and clamd.conf has: >> >> TCPSocket 3310 >> TCPAddr 127.0.0.1 >> >> I see (from the headers) that mail messages coming in to my server >> have been scanned by Dspam, but there's no indication in those >> headers >> that it has also been scanned by ClamAV. >> >> Is there any way for me to be sure the configuration is working? > > ClamAV has it's own logging mechanism. When it is configured correctly > it will tell you exactly what it has been doing. See the logging > section > in clamd.conf. > > dp > > > ------------------------------ > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > End of clamav-users Digest, Vol 47, Issue 5 > ******************************************* >
Thanks Dennis - much appreciated!! I've looked at the log files and all they are recording is the virus- updated-induced reloads. So I'm not sure what's happening. I assume ClamAV would only report anything at all (even to log files) if it was handed a message and found it to have a virus. If it had no virus, I assume ClamAV would deliver it as clean. The question is: if I were to look at the log file, what would/should I see there if: 1) ClamAV found something to be a virus? or 2) Clam AV processed a message that had no virus in it Any help is appreciated...thanks! --Jeff _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
