Clamd problem

[Alex Broens]

my setup with Pfix (not using socket!)

clamd.conf
# Path to a local socket file the daemon will listen on.
# Default: disabled (must be specified by a user)
# LocalSocket /tmp/clamd.socket

# Remove stale socket after unclean shutdown.
# Default: yes
#FixStaleSocket yes

# TCP port address.
# Default: no
TCPSocket 3310

# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
# Default: no
TCPAddr 127.0.0.1

relevant part in MailScanner.conf

Clamd Port = 3310
Clamd Socket = /tmp/clamd
Clamd Lock File = # /var/lock/subsys/clamd
Clamd Use Threads = yes





On 11/24/2009 5:52 PM, Garrod M. Alwood wrote:
> nope, didn't work.This is really wierd. All of my training says that if I put postfix (which is the chown user) and www-data (which is the chown group) in to clamav then it should be able to access everything that those two can access or am I missing something here? I am including my clamd.conf file below. I really don't want to use 0755 for my permissions as when I googled I saw in one post, unless I really have to.
> 
> #Automatically Generated by clamav-base postinst
> #To reconfigure clamd run #dpkg-reconfigure clamav-base
> #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
> LocalSocket /tmp/clamd.socket
> FixStaleSocket true
> # TemporaryDirectory is not set to its default /tmp here to make overriding
> # the default with environment variables TMPDIR/TMP/TEMP possible
> User clamav
> AllowSupplementaryGroups yes
> ScanMail true
> ScanArchive true
> ArchiveBlockEncrypted false
> MaxDirectoryRecursion 15
> FollowDirectorySymlinks false
> FollowFileSymlinks false
> ReadTimeout 180
> MaxThreads 12
> MaxConnectionQueueLength 15
> StreamMaxLength 50M
> LogSyslog true
> LogFacility LOG_LOCAL6
> LogClean false
> LogVerbose false
> PidFile /var/run/clamav/clamd.pid
> DatabaseDirectory /var/lib/clamav
> SelfCheck 3600
> Foreground false
> Debug false
> ScanPE true
> ScanOLE2 true
> ScanHTML true
> DetectBrokenExecutables false
> MailFollowURLs false
> ExitOnOOM false
> LeaveTemporaryFiles false
> AlgorithmicDetection true
> ScanELF true
> IdleTimeout 30
> PhishingSignatures true
> PhishingScanURLs true
> PhishingAlwaysBlockSSLMismatch false
> DetectPUA false
> ScanPartialMessages false
> HeuristicScanPrecedence false
> StructuredDataDetection false
> CommandReadTimeout 5
> SendBufTimeout 200
> MaxQueue 100
> LogFile /var/log/clamav/clamav.log
> LogTime true
> LogFileUnlock false
> LogFileMaxSize 0
> 
> 
> Garrod M. Alwood
> Consultant
> garrod.alwood at lorodoes.com
> 904.738.4988
> ________________________________________
> From: mailscanner-bounces at lists.mailscanner.info [mailscanner-bounces at lists..mailscanner.info] On Behalf Of Alex Broens [ms-list at alexb.ch]
> Sent: Tuesday, November 24, 2009 11:49 AM
> To: MailScanner discussion
> Subject: Re: Clamd problem
> 
> On 11/24/2009 5:37 PM, Garrod M. Alwood wrote:
>> I am having trouble with the permissions of the clamd. I have put the postfix and www-data users in to the clamav group (both of which have owner permissions) and still clamd gets an permissions error everytime I run it. I have the permissions set to 0640. I am in need of help. oops put the other one with the wrong subject My bad.
> 
> clamd.conf
> 
> AllowSupplementaryGroups yes
> 
> does that help ?
> 
>> Garrod M. Alwood
>> Consultant
>> garrod.alwood at lorodoes.com
>> 904.738.4988--
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!-- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!