Kevin Clark wrote: > I'm following up on a previous post about logging to maillog: > > http://lurker.clamav.net/message/20090408.063308.16623e5a.en.html > > I am using Sendmail 8.13 on CentOS-4 but whereas previously with 0.94.2 I > would get a log entry in /var/log/maillog for every scanned message I now > only get a log event for infected messages or those with an existing > "X-Virus-Scanned" or "X-Virus-Status" header.
This won't happen with: > LogSyslog disabled > LogFacility = "LOG_LOCAL6" If you want messages logged to syslog, please config those options properly. > I have configured clamd to log every scanning event to > /var/log/clamav/clamd.log but whereas before it would log a message ID and > status I can now only get entries like these: Clamd has got no idea about message ids. Clamav-milter does. The place to look for them is therefore clamav-milter.log (or syslog if you follow the advice above). > I would appreciate some guidance on whether I am missing something obvious in > the configuration that would allow me to: See above. > 1) log every scanning event in /var/log/maillog In *clamav-milter.conf* set: LogSyslog yes LogFacility LOG_MAIL LogInfected Basic or LogInfected Full > 2) get more detailed log entries in /var/log/clamav/clamd.log If "more detailed" means "i want the message id's" then forget about that. Clamd does not know what a message id is. Again, the place for id's is clamav-milter's log. HtH, --acab _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
