Chuck Swiger wrote: > Hi, Carlos-- Thanks for the reply!
> Look in your amavisd.conf for the "@av_scanners" section; you should > check that you have a section like this: > > # ### http://www.clamav.net/ > ['ClamAV-clamd', > \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd"], > qr/\bOK$/, qr/\bFOUND$/, > qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ], > # # NOTE: run clamd under the same user as amavisd, or run it under > its own > # # uid such as clamav, add user clamav to the amavis group, and > then add > # # AllowSupplementaryGroups to clamd.conf; > # # NOTE: match socket name (LocalSocket) in clamav.conf to the socket > name in > # # this entry; when running chrooted one may prefer socket "$MYHOME/ > clamd". I just installed amavisd so it has a very small vanilla config and I don't see what you mentioned above in my config. Here is what I have: ========================================================================== use strict; $sa_tag_level_deflt = -5; # add spam info headers if at, or above that level $sa_tag2_level_deflt = 4; # add 'spam detected' headers at that level $sa_kill_level_deflt = 10000; # triggers spam evasive actions $sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent $forward_method = 'smtp:[127.0.0.1]:10025'; $notify_method = $forward_method; $virus_admin = '[EMAIL PROTECTED]'; # due to D_DISCARD default #inform recipients about a blocked mail $warnbannedrecip = 1; $warnvirusrecip = 1; $final_banned_destiny = D_PASS; $log_level = 2; # (defaults to 0), -d $DO_SYSLOG = 1; # log via syslogd (preferred) #------------ Do not modify anything below this line ------------- 1; # insure a defined return ========================================================================== Can I simply append your suggestion under $DO_SYSLOG? > > ...where the socket path matches what you are using in your > clamd.conf, and you should either run clamd and amavisd as the same > user (perhaps "vscan" or "clamav"), or else use the > AllowSupplementaryGroups option as documented above. This is very confusing for me as well being a newbie. Clamav is ran as user "clamav" and Amavisd-new is ran as user "amavis". I don't understand how to make them both run as the same user w/o breaking either. -- Carlos Williams Linux System Administrator IDE/PEOSTRI _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml