<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16608" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=482502117-14032008><FONT face=Arial
size=2><FONT color=#0000ff>First, to make sure it's permissions try running
clamd as root (remove the user clamav in clamd.conf). I believe it will. I
remember someone using postfix stating they had to setgid on incomming to get
clamd to work, and you can always add the clamav user to the postfix group and
set <FONT face="Times New Roman"><FONT size=3>"AllowSupplementaryGroups yes" in
clamd.conf. I personally think the latter to be the best
bet.</FONT></FONT></FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=482502117-14032008><FONT
color=#0000ff></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=482502117-14032008><FONT
color=#0000ff>Rick</FONT></SPAN></DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of
</B>Olivier FRANCHET<BR><B>Sent:</B> Friday, March 14, 2008 12:22
PM<BR><B>To:</B> MailScanner discussion<BR><B>Subject:</B> Re: ERROR::UNKNOWN
CLAMD RETURN<BR></FONT><BR></DIV>
<DIV></DIV><FONT face=Arial color=#0000ff size=2></FONT><FONT face=Arial
color=#0000ff size=2></FONT><BR><FONT face=sans-serif size=2>From my
MailScanner.conf :</FONT> <BR><BR><FONT face=sans-serif size=2>Run As User =
postfix</FONT> <BR><FONT face=sans-serif size=2>Run As Group = postfix</FONT>
<BR><BR><FONT face=sans-serif size=2>Incoming Work Dir =
/var/spool/MailScanner/incoming</FONT> <BR><BR><FONT face=sans-serif
size=2>Incoming Work User =</FONT> <BR><FONT face=sans-serif size=2>Incoming
Work Group = clamav</FONT> <BR><FONT face=sans-serif size=2>Incoming Work
Permissions = 0640</FONT> <BR><BR><BR><FONT face=sans-serif size=2>and rights
from directories :</FONT> <BR><BR><FONT face=sans-serif size=2>[root@centos
MailScanner]# ll</FONT> <BR><FONT face=sans-serif size=2>total 12</FONT>
<BR><FONT face=sans-serif size=2>drwxrw---- 8 postfix clamav 4096 mar 14
17:17 incoming</FONT> <BR><FONT face=sans-serif size=2>drwx------ 4 postfix
postfix 4096 mar 13 16:23 quarantine</FONT> <BR><FONT face=sans-serif
size=2>drwx------ 2 postfix postfix 4096 mar 11 23:46 spamassassin</FONT>
<BR><FONT face=sans-serif size=2>[root@centos MailScanner]# ll
incoming/</FONT> <BR><FONT face=sans-serif size=2>total 108</FONT> <BR><FONT
face=sans-serif size=2>drwxrwx--- 2 postfix clamav 4096 mar 14 17:11
25035</FONT> <BR><FONT face=sans-serif size=2>drwxrwx--- 2 postfix clamav
4096 mar 14 16:41 25496</FONT> <BR><FONT face=sans-serif
size=2>drwxrwx--- 2 postfix clamav 4096 mar 14 17:05 25657</FONT>
<BR><FONT face=sans-serif size=2>drwxrwx--- 2 postfix clamav 4096 mar
14 17:13 25811</FONT> <BR><FONT face=sans-serif size=2>drwxrwx--- 2 postfix
clamav 4096 mar 14 17:17 26252</FONT> <BR><FONT face=sans-serif
size=2>-rw-rw---- 1 postfix postfix 81920 mar 14 17:17
SpamAssassin.cache.db</FONT> <BR><FONT face=sans-serif size=2>drwxrw---- 2
postfix postfix 4096 mar 14 17:17 SpamAssassin-Temp</FONT> <BR><BR><FONT
face=sans-serif size=2>Cordialement/Regards,<BR>Olivier @ Dominux<BR></FONT><A
href="http://www.dominux.net/"><FONT face=sans-serif
size=2>http://www.dominux.net</FONT></A> <BR><BR><TT><FONT
size=2>mailscanner-bounces@lists.mailscanner.info a écrit sur 14/03/2008
12:58:09 :<BR><BR>> [image supprimée] </FONT></TT><BR><TT><FONT size=2>>
<BR>> Re: ERROR::UNKNOWN CLAMD RETURN</FONT></TT> <BR><TT><FONT size=2>>
<BR>> Glenn Steen </FONT></TT><BR><TT><FONT size=2>> <BR>>
en :</FONT></TT> <BR><TT><FONT size=2>> <BR>> MailScanner
discussion</FONT></TT> <BR><TT><FONT size=2>> <BR>> 14/03/2008
13:00</FONT></TT> <BR><TT><FONT size=2>> <BR>> Envoyé par :</FONT></TT>
<BR><TT><FONT size=2>> <BR>>
mailscanner-bounces@lists.mailscanner.info</FONT></TT> <BR><TT><FONT
size=2>> <BR>> Veuillez répondre à MailScanner discussion</FONT></TT>
<BR><TT><FONT size=2>> <BR>> On 14/03/2008, Olivier FRANCHET
<O.FRANCHET@dominux.net> wrote:<BR>> ><BR>> > Thank's for
your help. Below my Incoming Work Dir :<BR>> ><BR>> > Incoming
Work Dir = /var/spool/MailScanner/incoming<BR>> ><BR>> (snip)<BR>>
What permissions have you on that, what are your Run As<BR>>
User/Group/Permissions settings... And are you by any chance trying to<BR>>
get PF/Clamd(/MailWatch) working? If so, extra attention must be given<BR>>
to group memberships and permissions, since you would need the group<BR>>
clamd is tunning as to be able to access the work directories (and<BR>>
your apache user for the quarantine)...<BR>> I've seen some advice
somewhere for clamd that would be thoroughly<BR>> unsuitable for Postfix...
Can't really remember where though:-)<BR>> <BR>> Cheers<BR>> --
<BR>> -- Glenn<BR>> email: glenn < dot > steen < at > gmail
< dot > com<BR>> work: glenn < dot > steen < at > ap1
< dot > se<BR>> -- <BR>> MailScanner mailing list<BR>>
mailscanner@lists.mailscanner.info<BR>> </FONT></TT><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"><TT><FONT
size=2>http://lists.mailscanner.info/mailman/listinfo/mailscanner</FONT></TT></A><TT><FONT
size=2><BR>> <BR>> Before posting, read </FONT></TT><A
href="http://wiki.mailscanner.info/posting"><TT><FONT
size=2>http://wiki.mailscanner.info/posting</FONT></TT></A><TT><FONT
size=2><BR>> <BR>> Support MailScanner development - buy the book off
the website! <BR>> <BR>> -- <BR>> This message has been scanned for
viruses and<BR>> dangerous content by MailScanner, and is<BR>> believed
to be clean.<BR>> <BR></FONT></TT><BR>-- <BR>This message has been scanned
for viruses and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is
<BR>believed to be clean. <BR>-- <BR>This message has been scanned for viruses
and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is
<BR>believed to be clean. </BLOCKQUOTE></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>