Odd clam error in postfix logs

[Jason Ede]

Yes you're right. I didn't realise it did that, but just examined the script more closely and it does use EICAR test file.

Jason

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Gareth
> Sent: 11 September 2008 12:53
> To: MailScanner discussion
> Subject: Re: Odd clam error in postfix logs
>
> Isnt clamdwatch a script to monitor clamd and restart it if it fails?
>
> My guess is that it is being run for every mailscanner queue run and is
> is scanning the eicar test file to make sure it is working and reading
> its virus database correctly.
>
>
> On Thu, 2008-09-11 at 12:44, Jason Ede wrote:
> > I’ve just noticed we get this logged every time an email passed
> > through our system...
> >
> >
> >
> > Sep 11 12:41:01 gateway2 clamd[13691]:
> > /tmp/clamdwatch-DPB5RGeGkNR5sav3: Eicar-Test-Signature FOUND
> >
> >
> >
> > In /tmp that file doesn’t exist, so it must be something about how
> the
> > file is linked/extracted. I’m guessing this is not expected
> behaviour.
> >
> >
> >
> > Am on clam 0.93.3 and clamd is running
> >
> >
> >
> > Jason
> >
> >
> >
> >
> >
> >
> >
> >
> ______________________________________________________________________
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!