Mailscanner attach scan problem

Martin Hepworth maxsec at gmail.com
Tue Dec 14 16:23:49 GMT 2010


Assuming your clamd process is running as clamav:clamav from the clamd.conf
file of course..


-- 
Martin Hepworth
Oxford, UK


On 14 December 2010 16:08, Glenn Steen <glenn.steen at gmail.com> wrote:

> (Sorry for the top post... couldn't be helped:-)
>
> Right... Could you try the following:
> edit mailScanner.conf and set:
> Incoming Work User = postfix
> Incoming Work Group = clamav
> Incoming Work Permissions = 0660
> and of course set virus scanner to clamd... Then do
> chown -R postfix.clamav /var/spool/MailScanner/incoming
> chmod o+rx /var/spool/MailScanner
> then restart MailScanner and see what happens... If you want to check
> things manually, you need check that both postfix _and_ clamav
> users/groups can access the created directories fully.
>
> Cheers!
> --
> -- Glenn
>
> On 14 December 2010 15:23, Ante Gulam <ante.gulam at ri-ing.hr> wrote:
> > Hi,
> >
> > Here are the outputs: (i've modified this all while trying to set clamd
> to
> > work but after fail
> >
> > most things reconfigured to default so many values are default)...
> >
> > ----------------------------
> >
> > root at mailfilter:/etc/MailScanner# grep "Incoming Work"
> > etc/MailScanner/MailScanner.conf
> >
> >
> >
> > # temporary files created by MailScanner, please see the "Incoming Work"
> >
> > Incoming Work Dir = /var/spool/MailScanner/incoming
> >
> > # Incoming Work Dir Settings
> >
> > #       and "Incoming Work Group"
> >
> > #Incoming Work Group = clamav
> >
> > #Incoming Work Permissions = 0640
> >
> > Incoming Work User =
> >
> > Incoming Work Group =
> >
> > #       Incoming Work Group = clamav
> >
> > #Incoming Work Permissions = 0640
> >
> > Incoming Work Permissions = 0600
> >
> > #           *Note: read the comments above the "Incoming Work Group"
> > setting*,
> >
> > Hide Incoming Work Dir = yes
> >
> > Hide Incoming Work Dir in Notices = no
> >
> > ------------------------------
> >
> > i.e. i've tried work user and group set to clamav.. also as postfix..
> > (clamav is in postfix group)..
> >
> > also uncommented 0640 perms.  etc. etc. as i've said clam then is not
> > reporting any error (lstat()) but mail stops flowing.
> >
> > -------------------------------
> >
> > root at mailfilter:/etc/MailScanner# ls -la /var/spool/MailScanner
> >
> > total 24
> >
> > drwxrwx---  6 postfix postfix 4096 2010-12-02 20:14 .
> >
> > drwxr-xr-x 12 root    root    4096 2010-12-02 20:12 ..
> >
> > drwxr-xr-x  2 postfix postfix 4096 2009-02-17 23:53 archive
> >
> > drwxr-xr-x 23 postfix clamav  4096 2010-12-14 14:34 incoming
> >
> > drwxr-xr-x 10 postfix postfix 4096 2010-12-14 10:26 quarantine
> >
> > drwxr-xr-x  2 postfix postfix 4096 2010-12-01 11:50 spamassassin
> >
> > also as i remember i added +rx to group and all for these, thinking i'll
> > make it over and get clam working... also changing groups and owners
> didn't
> > help.
> >
> > ----------
> >
> > ls –ld
> >
> > drwxrwxrwt 7 root root 4096 2010-12-14 14:34 /tmp
> >
> > ------
> >
> > 777 here..
> >
> > If you have some idea that might help...
> >
> > I've just tested my mail with spam test mails and SA works really fine.
> I've
> > also tested clam by sending that test email with the EICAR anti-virus
> test
> > file. It passed my mailscanner and i've recieved it on exchange.. so
> > obviously there is no scanning done but i get msgs like
> >
> > Dec 14 14:34:39 mailfilter MailScanner[4652]: Virus Scanning: Clamd found
> 1
> > infections
> >
> > Dec 14 14:34:39 mailfilter MailScanner[4652]: Virus Scanning: Found 1
> > viruses
> >
> > Dec 14 14:34:39 mailfilter MailScanner[4652]: Requeue: 5D925688F8.1D075
> to
> > 1FBCF6CDD5
> >
> > In mail.log.
> >
> >
> >
> > Regards,
> >
> > Ante
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> >
>
>
>
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20101214/188739c3/attachment.html


More information about the MailScanner mailing list