>> Message: 29 >> Date: Thu, 7 Aug 2008 21:50:52 -0700 >> From: Jeff Weinberger <[EMAIL PROTECTED]> >> Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify >> it's >> working? >> To: clamav-users@lists.clamav.net >> Message-ID: <[EMAIL PROTECTED]> >> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes >> >> Hi: >> >> Pardon me if this is obvious - I'm new to both Dspam and ClamAV. >> >> I built Dspam with --enable-clamav, ensured that: dspam.conf has: >> >> ClamAVPort 3310 >> ClamAVHost 127.0.0.1 >> >> and clamd.conf has: >> >> TCPSocket 3310 >> TCPAddr 127.0.0.1 >> >> I see (from the headers) that mail messages coming in to my server >> have been scanned by Dspam, but there's no indication in those >> headers >> that it has also been scanned by ClamAV. >> >> Is there any way for me to be sure the configuration is working? >> >> Thank you for any help, suggestions, or pointers! >> >> System: >> Mac OS/X 10.5.4 (intel, client) >> Postfix MTA with Dspam specified as the content_filter >> What other specifics might be helpful? >> >> >> >> ------------------------------ >> >> Message: 30 >> Date: Thu, 07 Aug 2008 22:14:54 -0700 >> From: Dennis Peterson <[EMAIL PROTECTED]> >> Subject: Re: [Clamav-users] Using ClamAV with Dspam - how do I verify >> it's working? >> To: ClamAV users ML <clamav-users@lists.clamav.net> >> Message-ID: <[EMAIL PROTECTED]> >> Content-Type: text/plain; charset=ISO-8859-1; format=flowed >> >> Jeff Weinberger wrote: >>> Hi: >>> >>> Pardon me if this is obvious - I'm new to both Dspam and ClamAV. >>> >>> I built Dspam with --enable-clamav, ensured that: dspam.conf has: >>> >>> ClamAVPort 3310 >>> ClamAVHost 127.0.0.1 >>> >>> and clamd.conf has: >>> >>> TCPSocket 3310 >>> TCPAddr 127.0.0.1 >>> >>> I see (from the headers) that mail messages coming in to my server >>> have been scanned by Dspam, but there's no indication in those >>> headers >>> that it has also been scanned by ClamAV. >>> >>> Is there any way for me to be sure the configuration is working? >> >> ClamAV has it's own logging mechanism. When it is configured >> correctly >> it will tell you exactly what it has been doing. See the logging >> section >> in clamd.conf. >> >> dp >> >> >> ------------------------------ >> >> _______________________________________________ >> clamav-users mailing list >> clamav-users@lists.clamav.net >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users >> >> >> End of clamav-users Digest, Vol 47, Issue 5 >> ******************************************* >> > > Thanks Dennis - much appreciated!! > > I've looked at the log files and all they are recording is the virus- > updated-induced reloads. So I'm not sure what's happening. > > I assume ClamAV would only report anything at all (even to log files) > if it was handed a message and found it to have a virus. If it had no > virus, I assume ClamAV would deliver it as clean. > > The question is: if I were to look at the log file, what would/should > I see there if: > > 1) ClamAV found something to be a virus? or > 2) Clam AV processed a message that had no virus in it > > Any help is appreciated...thanks! > > --Jeff > > > > ------------------------------ > > Message: 7 > Date: Sun, 10 Aug 2008 11:15:49 +0200 > From: Tomasz Kojm <[EMAIL PROTECTED]> > Subject: Re: [Clamav-users] Using ClamAV with Dspam - how do I verify > it's working? > To: clamav-users@lists.clamav.net > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=US-ASCII > > On Sat, 9 Aug 2008 22:06:39 -0700 > Jeff Weinberger <[EMAIL PROTECTED]> wrote: > >> I assume ClamAV would only report anything at all (even to log files) >> if it was handed a message and found it to have a virus. If it had no >> virus, I assume ClamAV would deliver it as clean. > > If you enable LogClean in clamd.conf then clamd will log all files > > -- > oo ..... Tomasz Kojm <[EMAIL PROTECTED]> > (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg > \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B > //\ /\ Sun Aug 10 11:13:46 CEST 2008 > > > ------------------------------
Tomasz: Thank you!! So it seems that when I run a test from the command line, all runs well. But there's no record of Dspam processing any messages through ClamAV. I have to suspect it's a Dspam or Dspam configuration issue. If anyone has an idea about where to look for (and solve?) the problem, I'd appreciate it! Thanks! _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
