clamavmodule

Julian Field MailScanner at ecs.soton.ac.uk
Wed Sep 9 11:22:57 IST 2009


What does your maillog show?

If freshclam is running, that may cause no mail to go through as the 
virus scanner autoupdate process locks out each scanner while it is 
being updated, to avoid race conditions.

Is mail going through and not being scanner? Or is no mail getting 
through at all?

On 09/09/2009 11:15, Maurizio Salvadeo wrote:
> thanks. now clamav is my default virus scanner. the problem is that no
> email is scanned from MailScanner. the OS is a Fedora 10 and this is my
> ps command:
>
> 12427 ?        Ss     0:00 /usr/local/bin/freshclam -d
> 12464 ?        Ss     0:00 sendmail: accepting
> connections
>
> 12468 ?        Ss     0:00 sendmail: Queue runner at 00:15:00 for
> /var/spool/clientmqueue
> 12472 ?        Ss     0:00 sendmail: Queue runner at 00:15:00 for
> /var/spool/mqueue
> 12492 ?        Ss     0:00 MailScanner: master waiting for children,
> sleeping
> 12493 ?        S      0:01 MailScanner: waiting for
> messages
> 12497 ?        S      0:01 MailScanner: waiting for
> messages
> 12548 ?        S      0:01 MailScanner: waiting for
> messages
> 12551 ?        S      0:01 MailScanner: waiting for
> messages
> 12553 ?        S      0:01 MailScanner: waiting for messages
>
> Julian Field ha scritto:
>    
>> Search your system for "ClamAV.pm" with a command like "locate
>> ClamAV.pm" and delete it.
>>
>> You will be far better off using clamd, which is available from
>> rpmforge, this is *way* faster than using the clamav setting, as that
>> runs the command-line scanner for each batch of messages. Using clamd
>> avoids all the startup time associated with ClamAV.
>>
>> If you have installed ClamAV under /usr/local, then search your
>> /usr/local directories for any mention of files or directories
>> containing "clam" in their name, and delete them. Something like "find
>> /usr/local -name '*[Cc]lam*' -print" should find them for you.
>>
>> Then you can install clamd and its dependencies from rpmforge and use
>> that instead.
>>
>> On 09/09/2009 10:03, Maurizio Salvadeo wrote:
>>      
>>> how can I remove clamavmodule? I need to scan my email with clamav.
>>> MailScanner does not scan any message and this is my config:
>>>
>>> Reading configuration file /etc/MailScanner/MailScanner.conf
>>> Reading configuration file /etc/MailScanner/conf.d/README
>>> Read 856 hostnames from the phishing whitelist
>>> Read 6695 hostnames from the phishing blacklists
>>>
>>> Checking version numbers...
>>> Version number in MailScanner.conf (4.78.14) is correct.
>>>
>>> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
>>>
>>> Checking for SpamAssassin errors (if you use it)...
>>> Using SpamAssassin results cache
>>> Connected to SpamAssassin cache database
>>> SpamAssassin reported no errors.
>>> Connected to Processing Attempts Database
>>> Created Processing Attempts Database successfully
>>> There are 0 messages in the Processing Attempts Database
>>> Using locktype = posix
>>> MailScanner.conf says "Virus Scanners = clamav"
>>> Found these virus scanners installed: clamavmodule
>>> ===========================================================================
>>>
>>> Filename Checks: Windows/DOS Executable (1 eicar.com)
>>> Other Checks: Found 1 problems
>>> Virus and Content Scanning: Starting
>>> ===========================================================================
>>>
>>>
>>> If any of your virus scanners (clamavmodule)
>>> are not listed there, you should check that they are installed correctly
>>> and that MailScanner is finding them correctly via its
>>> virus.scanners.conf.
>>>
>>>
>>>        
>> Jules
>>
>>      
>    

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list