I wanted to give Clam a shot, so I upgraded my Qmail-Scanner from 0.96 (which was using sweep) to 1.13 using clamav-0.23. The test_installation.sh script works perfectly, and if I stuff the EICAR string in a file, clamscan finds it, but messages coming in via SMTP containing it aren't being caught.
Here's the relevant part of the log: 18/08/2002 11:19:03:1248: clamscan: starting scan of directory "/var/spool/qmailscan/sparge10296839434231248"... 18/08/2002 11:19:03:1248: run /usr/local/bin/clamscan -r --tempdir=/var/spool/qmailscan/sparge10296839434231248 --disable-summary --unzip --unrar --unace --unarj --zoo --lha --jar --tar --tgz /var/spool/qmailscan/sparge10296839434231248 2>&1 18/08/2002 11:19:03:1248: --output of clamscan was: -- 18/08/2002 11:19:03:1248: clamscan: finished scan of dir "/var/spool/qmailscan/sparge10296839434231248" in 0.088048 secs 18/08/2002 11:19:03:1248: scanloop: finished scan of "/var/spool/qmailscan/sparge10296839434231248"... If I run a similar clamscan command on an eicar test file, I get: $ clamscan -r --disable-summary --unzip --unrar --unace --unarj --zoo --lha --jar --tar --tgz /tmp/eicar /tmp/eicar: Eicar-Test-Signature FOUND $ So I'm stumped... Any ideas? -Dave ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
