> On Wed, 2 Dec 2020, Tom Hendrikx wrote:
>
>>
>>
>> On 02-12-2020 16:18, Joe Acquisto-j4 wrote:
X-Spam-Virus: _CLAMAVRESULT
>>
>> I never integrated Clam using this plugin, but this seems a config
typo to
>> be: there should be a Yes/No in there, and optionally a virus name.
>>
>
> Yes, it looks like he's got a type-o in there. The config line should
be:
> "add_header spam Clamav _CLAMAVRESULT_"
> in a .cf someplace.
> Then the plugin will add that 'X-Spam-Virus:' header with the text
"Yes"
> followed by the name of the virus detected.
>
> You can then use the value of that header in other rules to add
points for
> various kinds of things detected or "meta"ed with other rules.
>
>
Is this normal, to show disable like that?
:~ # systemctl status clamd.service
clamd.service - Clamav antivirus Deamon Loaded: loaded
(/usr/lib/systemd/system/clamd.service; disabled; vendor preset:
disabled)
Active: active (running) since Wed 2020-12-02 10:57:33 EST; 3h 33min
ago
Process: 8000 ExecStart=/usr/sbin/clamd (code=exited,
status=0/SUCCESS)
Main PID: 8002 (clamd)
Tasks: 2 (limit: 4915)
CGroup: /system.slice/clamd.service
└─8002 /usr/sbin/clamd
I did systemcrl enable clamd.service, it created a symlink, restarted
services and . . .none of that did it.
Then I looked over the clamv.cf again and noticed the missing training
underscore "add_header all Virus _CLAMAVRESULT_"
At least is now says "No" for supposedly non infected messages.
Thanks for the assistance.
joe a
