clamavmodule

Julian Field MailScanner at ecs.soton.ac.uk
Wed Sep 9 11:49:46 IST 2009


Did you stop sendmail and stop it starting at boot, before you started 
MailScanner?

service sendmail stop
service MailScanner restart
chkconfig sendmail off
chkconfig MailScanner on

On 09/09/2009 11:41, Maurizio Salvadeo wrote:
> no message is scanned at all and the email is deliverd at the right
> account. spamassassin seems to work because in MailScanner.conf I
> redirect spam at spam at mydomain.com and that email is populated.
>
> this is my maillog when MailScanner starts.
> Sep  9 12:07:01 intranet MailScanner[12553]: MailScanner E-Mail Virus
> Scanner version 4.78.14 starting...
> Sep  9 12:07:01 intranet MailScanner[12553]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
> Sep  9 12:07:01 intranet MailScanner[12553]: Reading configuration file
> /etc/MailScanner/conf.d/README
> Sep  9 12:07:01 intranet MailScanner[12553]: Read 856 hostnames from the
> phishing whitelist
> Sep  9 12:07:02 intranet MailScanner[12553]: Read 6713 hostnames from
> the phishing blacklists
> Sep  9 12:07:02 intranet MailScanner[12553]: Using SpamAssassin results
> cache
> Sep  9 12:07:02 intranet MailScanner[12553]: Connected to SpamAssassin
> cache database
> Sep  9 12:07:02 intranet MailScanner[12553]: Enabling SpamAssassin
> auto-whitelist functionality...
> Sep  9 12:07:03 intranet MailScanner[12553]: Connected to Processing
> Attempts Database
> Sep  9 12:07:03 intranet MailScanner[12553]: Found 0 messages in the
> Processing Attempts Database
> Sep  9 12:07:03 intranet MailScanner[12553]: Using locktype = posix
>
>
> Julian Field ha scritto:
>    
>> What does your maillog show?
>>
>> If freshclam is running, that may cause no mail to go through as the
>> virus scanner autoupdate process locks out each scanner while it is
>> being updated, to avoid race conditions.
>>
>> Is mail going through and not being scanner? Or is no mail getting
>> through at all?
>>
>> On 09/09/2009 11:15, Maurizio Salvadeo wrote:
>>      
>>> thanks. now clamav is my default virus scanner. the problem is that no
>>> email is scanned from MailScanner. the OS is a Fedora 10 and this is my
>>> ps command:
>>>
>>> 12427 ?        Ss     0:00 /usr/local/bin/freshclam -d
>>> 12464 ?        Ss     0:00 sendmail: accepting
>>> connections
>>>
>>> 12468 ?        Ss     0:00 sendmail: Queue runner at 00:15:00 for
>>> /var/spool/clientmqueue
>>> 12472 ?        Ss     0:00 sendmail: Queue runner at 00:15:00 for
>>> /var/spool/mqueue
>>> 12492 ?        Ss     0:00 MailScanner: master waiting for children,
>>> sleeping
>>> 12493 ?        S      0:01 MailScanner: waiting for
>>> messages
>>> 12497 ?        S      0:01 MailScanner: waiting for
>>> messages
>>> 12548 ?        S      0:01 MailScanner: waiting for
>>> messages
>>> 12551 ?        S      0:01 MailScanner: waiting for
>>> messages
>>> 12553 ?        S      0:01 MailScanner: waiting for messages
>>>
>>> Julian Field ha scritto:
>>>
>>>        
>>>> Search your system for "ClamAV.pm" with a command like "locate
>>>> ClamAV.pm" and delete it.
>>>>
>>>> You will be far better off using clamd, which is available from
>>>> rpmforge, this is *way* faster than using the clamav setting, as that
>>>> runs the command-line scanner for each batch of messages. Using clamd
>>>> avoids all the startup time associated with ClamAV.
>>>>
>>>> If you have installed ClamAV under /usr/local, then search your
>>>> /usr/local directories for any mention of files or directories
>>>> containing "clam" in their name, and delete them. Something like "find
>>>> /usr/local -name '*[Cc]lam*' -print" should find them for you.
>>>>
>>>> Then you can install clamd and its dependencies from rpmforge and use
>>>> that instead.
>>>>
>>>> On 09/09/2009 10:03, Maurizio Salvadeo wrote:
>>>>
>>>>          
>>>>> how can I remove clamavmodule? I need to scan my email with clamav.
>>>>> MailScanner does not scan any message and this is my config:
>>>>>
>>>>> Reading configuration file /etc/MailScanner/MailScanner.conf
>>>>> Reading configuration file /etc/MailScanner/conf.d/README
>>>>> Read 856 hostnames from the phishing whitelist
>>>>> Read 6695 hostnames from the phishing blacklists
>>>>>
>>>>> Checking version numbers...
>>>>> Version number in MailScanner.conf (4.78.14) is correct.
>>>>>
>>>>> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
>>>>>
>>>>> Checking for SpamAssassin errors (if you use it)...
>>>>> Using SpamAssassin results cache
>>>>> Connected to SpamAssassin cache database
>>>>> SpamAssassin reported no errors.
>>>>> Connected to Processing Attempts Database
>>>>> Created Processing Attempts Database successfully
>>>>> There are 0 messages in the Processing Attempts Database
>>>>> Using locktype = posix
>>>>> MailScanner.conf says "Virus Scanners = clamav"
>>>>> Found these virus scanners installed: clamavmodule
>>>>> ===========================================================================
>>>>>
>>>>>
>>>>> Filename Checks: Windows/DOS Executable (1 eicar.com)
>>>>> Other Checks: Found 1 problems
>>>>> Virus and Content Scanning: Starting
>>>>> ===========================================================================
>>>>>
>>>>>
>>>>>
>>>>> If any of your virus scanners (clamavmodule)
>>>>> are not listed there, you should check that they are installed
>>>>> correctly
>>>>> and that MailScanner is finding them correctly via its
>>>>> virus.scanners.conf.
>>>>>
>>>>>
>>>>>
>>>>>            
>>>> Jules
>>>>
>>>>
>>>>          
>>>
>>>        
>> Jules
>>
>>      
>    

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list