....
 

Guardian Digital Inc. > InfoCenter > Mailing List Archives > Amavis

Amavis Mailing List Archive

From: Mark Martinec (Mark.Martinec+amavis@ijs.si)
Date: Thu Dec 23 2004 - 18:43:06 EST


Tim,

> This problem has me yanking out my hair.
> I am running amavisd amavisd-new-20030616-p10 on an OpenBSD 3.6 machine.
>...
> What is happening is, when I enable lookup_sql_dsn, viruses get
> through. The logs show the infected files as being okay.
> Dec 21 10:20:57 mailscan amavisd[21875]: (21875-01) Clam Antivirus-clamd
> result: /var/amavisd/tmp/amavis-20041221T102057-21875/parts/part-00002:
> Eicar-Test-Signature FOUND\n
> And here it is again when turned on:
> Dec 21 10:18:23 mailscan amavisd[7037]: (07037-01) Clam Antivirus-clamd
> result: /var/amavisd/tmp/amavis-20041221T101823-07037/parts: OK\n

I don't remember hearing about such a problem so far.

The first thing to do would be to determine if the
files passed to clamd are different in the two cases,
or is it the virus scanner that behaves differently.

Try adding another virus scanner to the mix, e.g. clamscan,
just to see if a command line scanner behaves differently
that the clamd.

You may set: @debug_sender_maps=(1);
which will cause temporary directories to be preserved
unconditionally (or make it trigger debug for some test sender only).
This way you will be able to examine the preserved directory
and see if the correct files are being passed to a virus scanner.

  Mark

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/



[ About Guardian Digital ] - [ Press Center ] - [ Contact Us ] - [ System Activation ] - [ Reseller Info ] - [ Online Store ] - [ Site Map ]
Copyright (c) 2000 - 2004 Guardian Digital, Inc. Linux Lockbox and EnGarde are Trademarks of Guardian Digital, Inc.