clamd configuration?

[Jason Ede]

Ok... I'm getting an unknown error returned now...

Jason

Jul  6 14:36:28 gateway MailScanner[19018]: Commencing scanning by clamd...
Jul  6 14:36:28 gateway MailScanner[19070]: Debug Mode Is On
Jul  6 14:36:28 gateway MailScanner[19070]: Use Threads : NO
Jul  6 14:36:28 gateway MailScanner[19070]: Socket    : /tmp/clamd
Jul  6 14:36:28 gateway MailScanner[19070]: IP        : Using Sockets
Jul  6 14:36:28 gateway MailScanner[19070]: Lock File : NOT USED
Jul  6 14:36:28 gateway MailScanner[19070]: Time Out  : 300
Jul  6 14:36:28 gateway MailScanner[19070]: Scan Dir  : /var/spool/MailScanner/incoming/19018
Jul  6 14:36:28 gateway MailScanner[19070]: Clamd : Sending PING
Jul  6 14:36:28 gateway MailScanner[19070]: Clamd : GOT 'PONG'
Jul  6 14:36:28 gateway MailScanner[19070]: ClamD is running
Jul  6 14:36:28 gateway MailScanner[19070]: SENT : CONTSCAN /var/spool/MailScanner/incoming/19018
Jul  6 14:36:28 gateway MailScanner[19018]: ERROR::UNKOWN CLAMD RETURN ./lstat() failed. ERROR :: /var/spool/MailScanner/incoming/19018
Jul  6 14:36:29 gateway MailScanner[19018]: Completed scanning by clamd
Jul  6 14:36:29 gateway MailScanner[19018]: Virus Scanning: Clamd found 1 infections
Jul  6 14:36:29 gateway MailScanner[19018]: Virus Scanning: Found 1 viruses
Jul  6 14:36:29 gateway MailScanner[19018]: Filename Checks: Windows/DOS Executable (76144968599.30A99 eicar.com)
Jul  6 14:36:29 gateway MailScanner[19018]: Filename Checks: Windows/DOS Executable (3D8D3968598.E288F eicar.com)
Jul  6 14:36:29 gateway MailScanner[19018]: Filename Checks: Windows/DOS Executable (946219685A0.5F3A4 eicar.com)
Jul  6 14:36:29 gateway MailScanner[19018]: Completed checking by /usr/bin/file
Jul  6 14:36:29 gateway MailScanner[19018]: Other Checks: Found 3 problems



-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Rick Cooper
Sent: 06 July 2007 12:19
To: 'MailScanner discussion'
Subject: RE: clamd configuration?



 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On  > Behalf Of Jason Ede  > Sent: Friday, July 06, 2007 5:42 AM  > To: MailScanner discussion  > Subject: RE: clamd configuration?
 >
 > I had the same problem with clamd missing the attached virus  > although all looks fine through the debug apart from the  > test viruses not being detected.
 >
 > I've checked user and permission levels and all looks good  > as far as I can see...
 >
 > I've gone back to using clamavmodule for now...
 >
 > Oh, MailScanner is 4.61.7 and clamav is the 0.91rc2  >  > Jason  > [...]

Apply the attached patch to SweepViruses.pm and retry clamd. You should see an error line this time. Best guess is a minor permissions problem, could be something else and it should still show up as an error line in the log.

        Julian,
        this patch should be applied to SweepViruses.pm Version 4.61.7

Rick

--
This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.