How are you catching these spam

[Andrews Carl 448]

Ok.
Yep, one config pointed to /tmp/clamd.socket but another pointed to
/tmp/clamd so I changed them both to /tmp/clamd and that is where it is
placed. Using clamd (which I will switch back to) I am getting hits on
other Sanesecurity.* but not the Sanesecurity.Spam.ldb.14 - and possibly
others. I have searched the system and I only see the sanesecurity files
in the two places I think they are supposed to be. Could I have done
something to make clamd and clamscan react differently to the same file?


-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mark
Nienberg
Sent: Wednesday, May 13, 2009 1:47 PM
To: MailScanner discussion
Subject: Re: How are you catching these spam

Andrews Carl 448 wrote:
> It should be getting all of it, here is all of the uncommented clam 
> options. I just switched to clamavmodule and it did not catch 
> sanesecurity.spam.ldb.14.UNOFFICIAL either but when I scan the message

> file with clam it does.
>
> Virus Scanners = clamavmodule
> Monitors for ClamAV Updates = /usr/local/share/clamav/*.cvd 
> ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 
> 1000 ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) 
> ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd 
> Socket = /tmp/clamd Clamd Lock File = # /var/lock/subsys/clamd Clamd 
> Use Threads = no ClamAV Full Massage Scan = yes
>
>   
Current wisdom is that you should stick with Clamd.

Is the value for Clamd Socket correct?  It must match the one in
/etc/clamd.conf.  On my system it is /tmp/clamd.socket

Mark Nienberg
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!