maillog logging level {Virus Scanned}
Christo Bezuidenhout
Christo at IT4AFRICA.CO.ZA
Tue Apr 19 07:24:20 IST 2005
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
> Sent: 18 April 2005 11:48 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: maillog logging level {Virus Scanned}
>
> Billy Pumphrey wrote:
>
> >Here is my syslog.conf file:
> >
> ># Log all kernel messages to the console.
> ># Logging much else clutters up the screen.
> >#kern.* /dev/console
> >
> ># Log anything (except mail) of level info or higher.
> ># Don't log private authentication messages!
> >*.info;mail.none;authpriv.none;cron.none
> /var/log/messages
> >
> ># The authpriv file has restricted access.
> >authpriv.*
> /var/log/secure
> >
> ># Log all the mail messages in one place.
> >mail.*
> -/var/log/maillog
Is the '-' supposed to be in from of /var/log/maillog
I had a look at my syslog.conf and it is without that.
> >
> >
> That looks okay.
>
> >
> ># Log cron stuff
> >cron.* /var/log/cron
> >
> ># Everybody gets emergency messages
> >*.emerg *
> >
> ># Save news errors of level crit and higher in a special file.
> >uucp,news.crit
> /var/log/spooler
> >
> ># Save boot messages also to boot.log
> >local7.*
> /var/log/boot.log
> >
> >
> >As far as clamv, are you speaking of:
> ># Path to the database directory.
> ># Default: hardcoded (depends on installation options)
> >#DatabaseDirectory /var/lib/clamav
> >
> >In the clamd.conf file?
> >
> >
> Yep, you should uncomment that. And check there is something
> in /var/lib/clamav!
>
> >
> >
> >>-----Original Message-----
> >>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
> >>Sent: Monday, April 18, 2005 4:22 PM
> >>To: MAILSCANNER at JISCMAIL.AC.UK
> >>Subject: Re: maillog logging level
> >>
> >>What priority levels are logged in maillog is governed by your
> >>/etc/syslog.conf, so start there.
> >>Also you need to edit the ClamAV config files so it knows where to
> >>find your Clam signature database files for the autoupdating.
> >>
> >>Billy Pumphrey wrote:
> >>
> >>
> >>
> >>>I am using CentOS 4
> >>>MailScanner 4.40.11
> >>>Spamassassin 3.0.1
> >>>
> >>>In the past before I made my new server, maillog contained
> entries of
> >>>all
> >>>
> >>>
> >>of
> >>
> >>
> >>>the mail that went through. Now it just contains a few
> lines such as:
> >>>
> >>>Apr 17 05:10:35 WoodenMS update.virus.scanners: Found generic
> >>>installed
> >>>
> >>>
> >>Apr
> >>
> >>
> >>>17 05:10:35 WoodenMS update.virus.scanners: Running autoupdate for
> >>>
> >>>
> >>generic
> >>
> >>
> >>>Apr 17 06:01:01 WoodenMS update.virus.scanners: Delaying
> cron job up
> >>>to
> >>>
> >>>
> >>600
> >>
> >>
> >>>seco nds Apr 17 06:09:50 WoodenMS update.virus.scanners:
> Found clamav
> >>>installed Apr 17 06:09:50 WoodenMS update.virus.scanners: Running
> >>>
> >>>
> >>autoupdate
> >>
> >>
> >>>for clamav Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV
> >>>
> >>>
> >>update
> >>
> >>
> >>>warning:
> >>>ERROR:
> >>>Please edit the example config file /etc/freshclam.conf.
> >>>Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV
> update warning:
> >>>ERROR:
> >>>Please edit the example config file /etc/clamd.conf.
> >>>Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV
> update warning:
> >>>ERROR:
> >>>Can't parse the config file /etc/clamd.conf Apr 17
> 06:09:50 WoodenMS
> >>>ClamAV-autoupdate[1085]: ClamAV updater failed Apr 17 06:09:50
> >>>WoodenMS
> >>>update.virus.scanners: Found generic installed Apr 17 06:09:50
> >>>WoodenMS
> >>>update.virus.scanners: Running autoupdate for generic Apr
> 17 07:01:01
> >>>WoodenMS update.virus.scanners: Delaying cron job up to
> 600 seco nds
> >>>Apr
> >>>
> >>>
> >>17
> >>
> >>
> >>>07:10:01 WoodenMS update.virus.scanners: Found clamav
> installed Apr
> >>>17
> >>>07:10:01 WoodenMS update.virus.scanners: Running autoupdate for
> >>>clamav
> >>>
> >>>
> >>Apr
> >>
> >>
> >>>17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV
> update warning:
> >>>ERROR:
> >>>Please edit the example config file /etc/freshclam.conf.
> >>>Apr 17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV
> update warning:
> >>>ERROR:
> >>>Please edit the example config file /etc/clamd.conf.
> >>>Apr 17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV
> update warning:
> >>>ERROR:
> >>>Can't parse the config file /etc/clamd.conf Apr 17
> 07:10:01 WoodenMS
> >>>ClamAV-autoupdate[1248]: ClamAV updater failed Apr 17 07:10:01
> >>>WoodenMS
> >>>update.virus.scanners: Found generic installed Apr 17 07:10:01
> >>>WoodenMS
> >>>update.virus.scanners: Running autoupdate for generic Apr
> 17 08:01:01
> >>>WoodenMS update.virus.scanners: Delaying cron job up to
> 600 seco Nds
> >>>
> >>>
> >>>
> >>>Despite the ClamAV autoupdate error, that is a problem
> that I didn't
> >>>see before.
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>>-----Original Message-----
> >>>>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
> >>>>Sent: Monday, April 18, 2005 3:54 PM
> >>>>To: MAILSCANNER at JISCMAIL.AC.UK
> >>>>Subject: Re: maillog logging level
> >>>>
> >>>>MailScanner has logged using syslog as far back as I can
> remember...
> >>>>
> >>>>What is the problem, and what OS are you using?
> >>>>
> >>>>Billy Pumphrey wrote:
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>I do not quite understand the new way of MailScanner
> loggin using
> >>>>>the
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>syslog
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>thing. I searched the archives and found that I need to
> put a -r
> >>>>>in
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>there
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>somewhere but that is not enough information for me.
> Can someone
> >>>>>help me out with getting the mailscanner logging back to
> "old school"?
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>--
> >>>>Julian Field
> >>>>www.MailScanner.info
> >>>>Buy the MailScanner book at www.MailScanner.info/store
> Professional
> >>>>Support Services at www.MailScanner.biz MailScanner
> thanks transtec
> >>>>Computers for their support
> >>>>
> >>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >>>>
> >>>>------------------------ MailScanner list
> ------------------------
> >>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>>'leave mailscanner' in the body of the email.
> >>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>>
> >>>>Support MailScanner development - buy the book off the website!
> >>>>
> >>>>
> >>>>
> >>>>
> >>>------------------------ MailScanner list
> ------------------------ To
> >>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>'leave mailscanner' in the body of the email.
> >>>Before posting, read the Wiki
> (http://wiki.mailscanner.info/) and the
> >>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>
> >>>Support MailScanner development - buy the book off the website!
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>>-----Original Message-----
> >>>>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
> >>>>Sent: Monday, April 18, 2005 3:54 PM
> >>>>To: MAILSCANNER at JISCMAIL.AC.UK
> >>>>Subject: Re: maillog logging level
> >>>>
> >>>>MailScanner has logged using syslog as far back as I can
> remember...
> >>>>
> >>>>What is the problem, and what OS are you using?
> >>>>
> >>>>Billy Pumphrey wrote:
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>I do not quite understand the new way of MailScanner
> loggin using
> >>>>>the
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>syslog
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>thing. I searched the archives and found that I need to
> put a -r
> >>>>>in
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>there
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>somewhere but that is not enough information for me.
> Can someone
> >>>>>help me out with getting the mailscanner logging back to
> "old school"?
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>--
> >>>>Julian Field
> >>>>www.MailScanner.info
> >>>>Buy the MailScanner book at www.MailScanner.info/store
> Professional
> >>>>Support Services at www.MailScanner.biz MailScanner
> thanks transtec
> >>>>Computers for their support
> >>>>
> >>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >>>>
> >>>>------------------------ MailScanner list
> ------------------------
> >>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>>'leave mailscanner' in the body of the email.
> >>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> >>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>>
> >>>>Support MailScanner development - buy the book off the website!
> >>>>
> >>>>
> >>>>
> >>>>
> >>>------------------------ MailScanner list
> ------------------------ To
> >>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>'leave mailscanner' in the body of the email.
> >>>Before posting, read the Wiki
> (http://wiki.mailscanner.info/) and the
> >>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>
> >>>Support MailScanner development - buy the book off the website!
> >>>
> >>>------------------------ MailScanner list
> ------------------------ To
> >>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>'leave mailscanner' in the body of the email.
> >>>Before posting, read the Wiki
> (http://wiki.mailscanner.info/) and the
> >>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>
> >>>Support MailScanner development - buy the book off the website!
> >>>
> >>>
> >>>
> >>>
> >>>
> >>--
> >>Julian Field
> >>www.MailScanner.info
> >>Buy the MailScanner book at www.MailScanner.info/store Professional
> >>Support Services at www.MailScanner.biz MailScanner thanks transtec
> >>Computers for their support
> >>
> >>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >>
> >>------------------------ MailScanner list
> ------------------------ To
> >>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>'leave mailscanner' in the body of the email.
> >>Before posting, read the Wiki
> (http://wiki.mailscanner.info/) and the
> >>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >>Support MailScanner development - buy the book off the website!
> >>
> >>
> >
> >------------------------ MailScanner list
> ------------------------ To
> >unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the Wiki
> (http://wiki.mailscanner.info/) and the
> >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >
> >
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list
> ------------------------ To unsubscribe, email
> jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/)
> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list