Clamd not being detected on fresh install of 4.66.5 on CentOS5

Ian Lists ian-list at securitypimp.com
Fri Jan 11 12:29:38 GMT 2008


Do you have SELinux enabled?  I had an issue once where I had to adjust the policy to allow it to communicate with mailscanner and RHEL 5.


----- "Jason Ede" <J.Ede at birchenallhowden.co.uk> wrote:
> Posted it, but it got blocked cos of the size.
> I've set up another machine identically and it seems to be working
> fine and detecting the scanner so I'm doubly puzzled...
> 
> The only thing I can think of is a difference in libraries somehow.
> I'll investigate and get back with more info...
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of UxBoD
> > Sent: 10 January 2008 20:21
> > To: MailScanner discussion
> > Subject: Re: Clamd not being detected on fresh install of 4.66.5 on
> > CentOS5
> >
> > can you post your mailscanner.conf ? hash out the watermark if and
> > domains though
> >
> > Regards,
> >
> > --[ UxBoD ]--
> > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg
> --import"
> > // Fingerprint: C759 8F52 1D17 B3C5 5854  36BD 1FB1 B02F 5DB5 687B
> > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
> > // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net
> >
> > ----- Original Message -----
> > From: "Jason Ede" <J.Ede at birchenallhowden.co.uk>
> > To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> > Sent: 10 January 2008 20:05:39 o'clock (GMT) Europe/London
> > Subject: RE: Clamd not being detected on fresh install of 4.66.5 on
> > CentOS5
> >
> > The permissions all look ok. The workdir was set to /tmp but I've
> moved
> > it back into the /var/spool/mailscanner dirs
> >
> > Still no joy... Its not reporting mcafee as present either, which
> is
> > also installed and working...
> >
> > Can I make it more verbose... Emails flow normally and are scanned
> for
> > spam which I assume wouldn't happen if permissions were wrong...
> >
> > Jason
> > ________________________________________
> > From: mailscanner-bounces at lists.mailscanner.info [mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of UxBoD
> [uxbod at splatnix.net]
> > Sent: 10 January 2008 18:16
> > To: MailScanner discussion
> > Subject: Re: Clamd not being detected on fresh install of 4.66.5 on
> > CentOS5
> >
> > Hmmm.  Are the permissions on your MS work directories okay?  The
> lint
> > creates a sample batch and uses the normal scanning process to
> check
> > the eicar file.  Just give them a glance over.
> >
> > Regards,
> >
> > --[ UxBoD ]--
> > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg
> --import"
> > // Fingerprint: C759 8F52 1D17 B3C5 5854  36BD 1FB1 B02F 5DB5 687B
> > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
> > // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net
> >
> > ----- Original Message -----
> > From: "Jason Ede" <J.Ede at birchenallhowden.co.uk>
> > To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> > Sent: 10 January 2008 17:59:03 o'clock (GMT) Europe/London
> > Subject: Clamd not being detected on fresh install of 4.66.5 on
> CentOS5
> >
> >
> >
> >
> >
> > I’ve installed clamav and setup clamd (latest 0.92) onto a fresh
> > install of CentOS 5 and set it up exactly the way I’ve always done
> it
> > on other machines, but it seems that MailScanner seems unable to
> detect
> > it (see below)
> >
> >
> >
> >
> >
> > [root at smtp MailScanner]# MailScanner --lint
> >
> > Trying to setlogsock(unix)
> >
> > Checking version numbers...
> >
> > Version number in MailScanner.conf (4.66.5) is correct.
> >
> >
> >
> > Your envelope_sender_header in spam.assassin.prefs.conf is correct.
> >
> >
> >
> > Checking for SpamAssassin errors (if you use it)...
> >
> > SpamAssassin temp dir = /tmp/SpamAssassin-Temp
> >
> > SpamAssassin reported no errors.
> >
> > MailScanner.conf says "Virus Scanners = clamd"
> >
> > Found these virus scanners installed: clamd
> >
> >
> =======================================================================
> > ====
> >
> >
> =======================================================================
> > ====
> >
> >
> >
> > If any of your virus scanners (clamd)
> >
> > are not listed there, you should check that they are installed
> > correctly
> >
> > and that MailScanner is finding them correctly via its
> > virus.scanners.conf.
> >
> > [root at smtp MailScanner]# clamdscan -V
> >
> > ClamAV 0.92/5470/Thu Jan 10 14:49:37 2008
> >
> > [root at smtp MailScanner]#
> >
> >
> >
> > I’ve the socket set to 3310, the same as before and clamdscan seems
> to
> > work, but just MailScanner seems unable to find it... Any ideas?
> >
> >
> >
> > Jason
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner , and is
> > believed to be clean.
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
> >
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


More information about the MailScanner mailing list