Is my clamav working?
Jørn-Morten Innselset
jorn-morten.innselset at BANETELE.COM
Mon Mar 22 01:16:55 GMT 2004
I'm a bit unsure that clamav is working in my Mailscanner setup - it _seems_
to work, according to the output to maillog (I've set up f-prot and clamav
as scanners):
Mar 22 02:10:09 mx MailScanner[41528]: Virus and Content Scanning: Starting
Mar 22 02:10:11 mx MailScanner[41528]:
/var/CommuniGate/spool/MailScanner/incoming/41528/./52599/mp3music.pif:
Worm.SomeFool.I FOUND
Mar 22 02:10:11 mx MailScanner[41528]: Virus Scanning: ClamAV found 1
infections
Mar 22 02:10:11 mx MailScanner[41528]:
/var/CommuniGate/spool/MailScanner/incoming/41528/52599/mp3music.pif
Infection: W32/Netsky.J at mm
Mar 22 02:10:11 mx MailScanner[41528]: Virus Scanning: F-Prot found virus
W32/Netsky.J at mm
Mar 22 02:10:11 mx MailScanner[41528]: Virus Scanning: F-Prot found 1
infections
Mar 22 02:10:11 mx MailScanner[41528]: Infected message 52599 came from
24.136.151.35
Mar 22 02:10:11 mx MailScanner[41528]: Virus Scanning: Found 1 viruses
Mar 22 02:10:11 mx MailScanner[41528]: Filename Checks: Possible MS-Dos
program shortcut attack (52599 mp3music.pif)
Mar 22 02:10:11 mx MailScanner[41528]: Other Checks: Found 1 problems
Mar 22 02:10:11 mx MailScanner[41528]: Virus Scanning completed at 15408
bytes per second
Mar 22 02:10:11 mx MailScanner[41528]: Notices: Warned about 1 messages
Mar 22 02:10:11 mx MailScanner[41528]: Virus Processing completed at 30816
bytes per second
Mar 22 02:10:11 mx MailScanner[41528]: Disinfection completed at 30816 bytes
per second
But there is no sign of clamav in the report:
The following e-mail messages were found to have viruses in them:
Sender: xxx at xxx.xxx
IP Address: 24.136.151.35
Recipient: yyy at yyy.yyy
Subject: Re: Your music
MessageID: 52599
Report: F-Prot:
/var/CommuniGate/spool/MailScanner/incoming/41528/52599/mp3music.pif
Infection: W32/Netsky.J at mm
MailScanner: Shortcuts to MS-Dos programs are very dangerous in
email (mp3music.pif)
Why isn't clamav mentioned here? Are there any settings I've overlooked?
Running MailScanner-devel-4.29.3, clamav-devel-20040313 on FreeBSD 4.9 with
CommuniGate Pro.
--
jmi
More information about the MailScanner
mailing list