<html dir="ltr"><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta content="MSHTML 6.00.6000.16939" name="GENERATOR">
<style title="owaParaStyle"><!--P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
--></style>
</head>
<body ocsi="x">
<div dir="ltr"><font face="Tahoma" color="#000000" size="2">It was apparmor (which I never configured.)</font></div>
<div>
<div><font face="Tahoma" size="2"></font> </div>
<div><font face="Tahoma" size="2"></font> </div>
<div><font face="Tahoma" size="2">Garrod M. Alwood</font></div>
<div><font face="tahoma" size="2">Consultant</font></div>
<div><font face="tahoma" size="2"><a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a></font></div>
<div><font face="tahoma" size="2">904.738.4988</font></div>
</div>
<div id="divRpF476303" style="DIRECTION: ltr">
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>From:</b> mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of shprahi shprahi [shprahi@gmail.com]<br>
<b>Sent:</b> Tuesday, November 24, 2009 1:42 PM<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> Re: Clamd problem<br>
</font><br>
</div>
<div></div>
<div>Please paste the error log and which folder permission clamd giving error <br>
<br>
<br>
<div class="gmail_quote">On Tue, Nov 24, 2009 at 11:02 PM, Alex Broens <span dir="ltr">
<<a href="mailto:ms-list@alexb.ch">ms-list@alexb.ch</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<div class="im">On 11/24/2009 6:15 PM, Garrod M. Alwood wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
does it use less resources that way?<br>
</blockquote>
<br>
</div>
using TCP instead of sockets? dunno.. but never liked sockets.<br>
guess some socket user can say more...<br>
<br>
ClamD/TCP have been very nice to me for a long time :-)
<div>
<div></div>
<div class="h5"><br>
<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<br>
Garrod M. Alwood<br>
Consultant<br>
<a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a><br>
904.738.4988<br>
________________________________________<br>
From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailscanner-bounces@lists..<a href="http://mailscanner.info" target="_blank">mailscanner.info</a>] On Behalf Of Alex Broens [<a href="mailto:ms-list@alexb.ch">ms-list@alexb.ch</a>]<br>
Sent: Tuesday, November 24, 2009 12:10 PM<br>
To: MailScanner discussion<br>
Subject: Re: Clamd problem<br>
<br>
my setup with Pfix (not using socket!)<br>
<br>
clamd.conf<br>
# Path to a local socket file the daemon will listen on.<br>
# Default: disabled (must be specified by a user)<br>
# LocalSocket /tmp/clamd.socket<br>
<br>
# Remove stale socket after unclean shutdown.<br>
# Default: yes<br>
#FixStaleSocket yes<br>
<br>
# TCP port address.<br>
# Default: no<br>
TCPSocket 3310<br>
<br>
# TCP address.<br>
# By default we bind to INADDR_ANY, probably not wise.<br>
# Enable the following to provide some degree of protection<br>
# from the outside world.<br>
# Default: no<br>
TCPAddr 127.0.0.1<br>
<br>
relevant part in MailScanner.conf<br>
<br>
Clamd Port = 3310<br>
Clamd Socket = /tmp/clamd<br>
Clamd Lock File = # /var/lock/subsys/clamd<br>
Clamd Use Threads = yes<br>
<br>
<br>
<br>
<br>
<br>
On 11/24/2009 5:52 PM, Garrod M. Alwood wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
nope, didn't work.This is really wierd. All of my training says that if I put postfix (which is the chown user) and www-data (which is the chown group) in to clamav then it should be able to access everything that those two can access or am I missing something
here? I am including my clamd.conf file below. I really don't want to use 0755 for my permissions as when I googled I saw in one post, unless I really have to.<br>
<br>
#Automatically Generated by clamav-base postinst<br>
#To reconfigure clamd run #dpkg-reconfigure clamav-base<br>
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details<br>
LocalSocket /tmp/clamd.socket<br>
FixStaleSocket true<br>
# TemporaryDirectory is not set to its default /tmp here to make overriding<br>
# the default with environment variables TMPDIR/TMP/TEMP possible<br>
User clamav<br>
AllowSupplementaryGroups yes<br>
ScanMail true<br>
ScanArchive true<br>
ArchiveBlockEncrypted false<br>
MaxDirectoryRecursion 15<br>
FollowDirectorySymlinks false<br>
FollowFileSymlinks false<br>
ReadTimeout 180<br>
MaxThreads 12<br>
MaxConnectionQueueLength 15<br>
StreamMaxLength 50M<br>
LogSyslog true<br>
LogFacility LOG_LOCAL6<br>
LogClean false<br>
LogVerbose false<br>
PidFile /var/run/clamav/clamd.pid<br>
DatabaseDirectory /var/lib/clamav<br>
SelfCheck 3600<br>
Foreground false<br>
Debug false<br>
ScanPE true<br>
ScanOLE2 true<br>
ScanHTML true<br>
DetectBrokenExecutables false<br>
MailFollowURLs false<br>
ExitOnOOM false<br>
LeaveTemporaryFiles false<br>
AlgorithmicDetection true<br>
ScanELF true<br>
IdleTimeout 30<br>
PhishingSignatures true<br>
PhishingScanURLs true<br>
PhishingAlwaysBlockSSLMismatch false<br>
DetectPUA false<br>
ScanPartialMessages false<br>
HeuristicScanPrecedence false<br>
StructuredDataDetection false<br>
CommandReadTimeout 5<br>
SendBufTimeout 200<br>
MaxQueue 100<br>
LogFile /var/log/clamav/clamav.log<br>
LogTime true<br>
LogFileUnlock false<br>
LogFileMaxSize 0<br>
<br>
<br>
Garrod M. Alwood<br>
Consultant<br>
<a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a><br>
904.738.4988<br>
________________________________________<br>
From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailscanner-bounces@lists..<a href="http://mailscanner.info" target="_blank">mailscanner.info</a>] On Behalf Of Alex Broens [<a href="mailto:ms-list@alexb.ch">ms-list@alexb.ch</a>]<br>
Sent: Tuesday, November 24, 2009 11:49 AM<br>
To: MailScanner discussion<br>
Subject: Re: Clamd problem<br>
<br>
On 11/24/2009 5:37 PM, Garrod M. Alwood wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
I am having trouble with the permissions of the clamd. I have put the postfix and www-data users in to the clamav group (both of which have owner permissions) and still clamd gets an permissions error everytime I run it. I have the permissions set to 0640.
I am in need of help. oops put the other one with the wrong subject My bad.<br>
</blockquote>
clamd.conf<br>
<br>
AllowSupplementaryGroups yes<br>
<br>
does that help ?<br>
<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
Garrod M. Alwood<br>
Consultant<br>
<a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a><br>
904.738.4988--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</blockquote>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</blockquote>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!-- MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</blockquote>
</div>
</div>
-- <br>
<div>
<div></div>
<div class="h5">MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>