<div dir="ltr">Sorry for late reply<div>this is the content of virus.scanners.conf</div><div><br></div><div>avg                     /usr/lib/MailScanner/wrapper/avg-wrapper                /usr<br>avast                   /usr/lib/MailScanner/wrapper/avast-wrapper              /bin<br>avastd                  /bin/false                                              /<br>bitdefender             /usr/lib/MailScanner/wrapper/bitdefender-wrapper        /opt/BitDefender<br>clamav                  /usr/lib/MailScanner/wrapper/clamav-wrapper             /usr<br>clamd                   /bin/false                                              /usr<br>clamavmodule            /bin/false                                              /usr/share/perl5/ClamAV<br>#esets                  /usr/lib/MailScanner/wrapper/esets-wrapper              /opt/eset/esets/sbin<br>esets                   /usr/lib/MailScanner/wrapper/esets-wrapper              /opt/eset/efs/sbin/cls<br>f-secure                /usr/lib/MailScanner/wrapper/f-secure-wrapper           /opt/f-secure/fsav<br>f-secured               /bin/false                                              /opt/f-secure/fsav<br>generic                 /usr/lib/MailScanner/wrapper/generic-wrapper            /dev/null<br>sophos                  /usr/lib/MailScanner/wrapper/sophos-wrapper             /opt/sophos-av<br>sophossavi              /bin/false                                              /tmp<br>none                    /bin/false                                              /dev/null<br>drweb                   /usr/lib/MailScanner/wrapper/drweb-wrapper              /usr/bin<br>kaspersky               /usr/lib/MailScanner/wrapper/kaspersky-wrapper          /opt/kaspersky/klms<br>kse                     /bin/false                                              /opt/kaspersky/ScanEngine<br></div><div><br></div><div>i changed the default esets as i notice that the efs v7 install in new directory structure</div><div><br></div><div>and this is the content of /usr/lib/MailScanner/wrapper/esets-wrapper</div><div><br></div><div>#PackageDir=$1<br>PackageDir="/opt/eset/efs/sbin/cls"<br>shift<br>#Prog=esets_scan<br>Prog=cls<br><br>if [ "x$1" = "x-IsItInstalled" ]; then<br>  [ -x ${PackageDir}/$Prog ] && exit 0<br>  exit 1<br>fi<br><br># Comment out if using sudo method<br># exec ${PackageDir}/$Prog "$@"<br><br># Uncomment if using sudo method<br>exec sudo ${PackageDir}/$Prog "$@"<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jan 28, 2021 at 2:53 AM Shawn Iverson via MailScanner <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
  
    
  
  <div>
    <p>What is the entry in your virus.scanners.conf?<br>
    </p>
    <div>On 1/27/21 12:12 PM, Budi F wrote:<br>
    </div>
    <blockquote type="cite">
      
      <div dir="ltr">
        <div>Hi,</div>
        <div><br>
        </div>
        <div>I'm not sure what happened, I installed clamd and eset, but
          it seem eset never scan emails as it supposed to, I only see
          clamd that do the virus scan</div>
        <div><br>
        </div>
        <div>I notice this problem as some email with virus able to get
          through to users, but luckily esets desktop able to scan the
          virus</div>
        <div><br>
        </div>
        [MailScanner]# MailScanner --lint<br>
        Trying to setlogsock(unix)<br>
        <br>
        Reading configuration file /etc/MailScanner/MailScanner.conf<br>
        Reading configuration file /etc/MailScanner/conf.d/README<br>
        Read 1500 hostnames from the phishing whitelist<br>
        Read 5545 hostnames from the phishing blacklists<br>
        Config: calling custom init function MailWatchLogging<br>
        MailWatch: Started MailWatch SQL Logging child<br>
        <br>
        Checking version numbers...<br>
        Version number in MailScanner.conf (5.3.3) is correct.<br>
        <br>
        Your envelope_sender_header in spamassassin.conf is correct.<br>
        MailScanner setting GID to  (89)<br>
        MailScanner setting UID to  (89)<br>
        <br>
        Checking for SpamAssassin errors (if you use it)...<br>
        Using SpamAssassin results cache<br>
        Connected to SpamAssassin cache database<br>
        SpamAssassin reported no errors.<br>
        Connected to Processing Attempts Database<br>
        Created Processing Attempts Database successfully<br>
        There are 0 messages in the Processing Attempts Database<br>
        Using locktype = posix<br>
        MailScanner.conf says "Virus Scanners = clamd esets"<br>
        Found these virus scanners installed: esets, clamd<br>
===========================================================================<br>
        Filename Checks: Blocked Filename Detected (1 <a href="http://eicar.com" target="_blank">eicar.com</a>)<br>
        Other Checks: Found 1 problems<br>
        Virus and Content Scanning: Starting<br>
        Clamd::INFECTED::Win.Test.EICAR_HDB-1 :: ./1/<br>
        Virus Scanning: Clamd found 1 infections<br>
        Infected message 1 came from 10.1.1.1<br>
        Virus Scanning: Found 1 viruses<br>
===========================================================================<br>
        <br>
        If any of your virus scanners (esets,clamd)<br>
        are not listed there, you should check that they are installed
        correctly<br>
        and that MailScanner is finding them correctly via its
        virus.scanners.conf.<br>
        Config: calling custom end function MailWatchLogging<br>
      </div>
      <br>
      <fieldset></fieldset>
      <pre></pre>
    </blockquote>
  </div>

<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</blockquote></div>