have you read the very good instructions in the MailScanner.conf file that talks about the permissions the 'run_as_user' and group needs to enable clamd scanning. You should find what you want in there.<br><br clear="all">
-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 9 December 2010 14:05, Ante Gulam <span dir="ltr"><<a href="mailto:ante.gulam@ri-ing.hr">ante.gulam@ri-ing.hr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div link="blue" vlink="purple" lang="HR">
<div>
<p class="MsoNormal">Hi...</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">So... here are some new things about my antispam/virus mail
relay server..</p>
<p class="MsoNormal">I've tuned up everything a little.. all seemed to work perfect..
until i noticed that some attachments that</p>
<p class="MsoNormal">Are recognized as virii (probably by clamAV) (in this case
CSV file) are blocked in /var/spool/postfix/hold... As the first problem which
i've posted here before.. BUT.. ive noticed now a error in /var/log/mail.log..
while „ tail –f the log „..</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">„WARNING: lstat() failed on:
/var/spool/MailScanner/incoming/2208“</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Related error was also in /var/log/clamav/clamav.log“...
filling up with errors..</p>
<p class="MsoNormal">As i've figured out it was related to permissions on
/incoming folder of /var/spool/MailScanner/ for user clamav.</p>
<p class="MsoNormal">I've usermod –a –G postfix clamav ... also gived
it more permissions .. but nothing helped.. </p>
<p class="MsoNormal">Setted also apparmor to allow incoming/** rw to clamav...
really played with it for a while with no success..</p>
<p class="MsoNormal">than i've noticed parameter in MailScanner.conf that
concerns work group perms and user perms.. so i changed it a little... And
suddenly no error was showing in logs.. clam's nor mail.log... </p>
<p class="MsoNormal">i've switched:</p>
<p class="MsoNormal"> #Incoming Work Permissions = 0640</p>
<p class="MsoNormal">Incoming Work Permissions = 0600</p>
<p class="MsoNormal">And uncommented:</p>
<p class="MsoNormal">#Incoming Work Group = clamav</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">But after changing those parameters it seems no mail is
passing <span style="font-family: Wingdings;">L</span> proc goes
<defunct>... and my postqueue –p is filling up with incoming
mails.. nothing helps.. i cannot find errors anywhere... except in my mail.log ..
mails keep filling..</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Dec 9 14:04:23 mailfilter MailScanner[30921]:
SpamAssassin cache hit for message E10BE6D22E.CB1AA</p>
<p class="MsoNormal">Dec 9 14:04:23 mailfilter MailScanner[30921]:
SpamAssassin cache hit for message ECD9F6D23A.731E2</p>
<p class="MsoNormal">Dec 9 14:04:23 mailfilter MailScanner[30921]:
SpamAssassin cache hit for message 043646D22F.77D01</p>
<p class="MsoNormal">Dec 9 14:04:23 mailfilter MailScanner[30921]:
SpamAssassin cache hit for message 288966D230.4BBCE</p>
<p class="MsoNormal">Dec 9 14:04:23 mailfilter MailScanner[30921]:
SpamAssassin cache hit for message 1FBF06D23B.BAD13</p>
<p class="MsoNormal">....</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Googling gave many solutions but none worked ... my mails
were stucked in hold.. i have no ideas anymore.. </p>
<p class="MsoNormal">Is the problem certanly with clam or ?! what's the most
painless way to upgrade the version of clamav..?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Hope someone had similiar situation.. now i've putted back
the permission parameters in MailScanner.conf..</p>
<p class="MsoNormal">All seems going ok again.. probably until some strange mail
comes in (csv, pptx, zip...) as soon it gets recognized as</p>
<p class="MsoNormal">Virus it stays in hold.. but other mails keeps going through
with some small delay.. is that way things should work ?!</p>
<p class="MsoNormal">Strange.. btw. Can i manually tell SA or Clam which
extensions to whitelist etc. ?! <span style="font-family: Wingdings;">J</span> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">tnx</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
</div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>