Building an MS-SA box

[Michael Weiner]

On Fri, 2004-02-20 at 20:04, Peter Bonivart wrote:
> Could you mail the relevant lines from your MailScanner.conf regarding
> the virus scanning?
> 
> You could also look in /tmp for lock files from Clam when used by MS, it
> should be visible in "top" also. Run two terminals, one "tail -f
> maillog" and one with "top", then mail yourself from the outside and
> watch closely.
> 
> If you send eicar.com it should trigger Clam, file type and file name.
> 

<snip>
Virus Scanning = yes
Virus Scanners = clamav
Virus Scanner Timeout = 300
Silent Viruses = HTML-I
Frame All-Viruses
Still Deliver Silent Viruses = no
..

i do see the ClamAVBusy.lock file in /tmp and the timestamp changes as
well, so there is something going on. But eicar.com still comes back
"clean"
-- 
Michael B. Weiner, Linux+, Linux+ SME
Systems Administrator/Partner
The UserFriendly Network (UFN)
--
Linux Registered User #94900    Have you been counted?
http://counter.li.org
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040220/8b3b3216/attachment.bin