At 05:43 AM Monday, 4/6/2009, you wrote -=>
>Hi
>
>I am having trouble getting the clamav-milter to log what has been scanned
>or infected to the maillog.
>
>I have enable the following settings in clamav-milter.conf
>
>AddHeader yes
>LogSyslog yes
>LogFacility LOG_MAIL
>LogVerbose yes
>
>Can someone please assist.
>
>Regards
>
>
>Ebrahim Abrahams

With:
AddHeader yes
...and these 3 set to defaults:
#LogSyslog no
#LogFacility LOG_MAIL
#LogVerbose yes

...this is what I get in maillog with sendmail:
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: 
from=<emailtest...@gfi.com>, size=6474, class=0, nrcpts=1, 
msgid=<gfiso001-gfiws22qgr00006...@gfiws2.gfi.com>, proto=ESMTP, 
daemon=MTA, relay=[216.134.217.100]
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter add: 
header: Received-SPF: pass (yoda.wrenkasky.com: domain of 
emailtest...@gfi.com designates 216.134.217.100 as permitted sender)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Scanned: clamav-milter 0.95 at yoda.wrenkasky.com
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Status: Infected (Exploit.GFI)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: milter=clamav, 
quarantine=quarantined by clamav-milter

What mailer program are you using?

Ed Kasky
~~~~~~~~~
Randomly Generated Quote (124 of 1229):
"It is better to offer no excuse than a bad one."
    --George Washington

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to