Page 1 of 1

About ClamAV

Posted: Tue Mar 14, 2006 8:43 pm
by dangin2005
Dear Scalix,
I am using RHEL4 and Scalix 10

I Have install and update clamAV with new database and have configured it by following KnowledgeBase from scalix.com with title ClamAV in a Scalix Environment.
How to make sure clamAV running well for scalix (scanning for send/receive email) becauce in header message iam not seen anything about scanning message by clamAV. So in log file (/var/log/maillog) i dont seen information about scanning by clamAV..

Please Help me
Dangin

Posted: Tue Mar 14, 2006 9:09 pm
by mephisto
This has been discussed here.

See chapter 6. Testing in the PDF you mentioned for information on how to check if ClamAV is working.

Posted: Tue Mar 14, 2006 9:52 pm
by dangin2005
Thanks mephisto,
I have following chapter 6 in pdf document. an try send email with attachment clam.exe (clam.exe is proviced by clamAV in folder test from tarball). The message return to sender with error message : Message could not be delivered to the following recipient: (email address recipient) because : Message contains virus infected file

Supplementary Infomation:
Contents of file ndninfo.txt

My problem is : i dont seen anything (such as: message-filter-info +VIRUS-UNCLEANED=REJECT) in /var/opt/scalix/logs/audit log file..

with above condition, clamAV running correctly for scalix or not yet...?

Please help me..
Regards
Dangin

Posted: Wed Mar 15, 2006 7:28 am
by mephisto
Try to send the infected email from an external address. To see the log messages you need to do the following:
Turn up audit logging for service router:

Code: Select all

omconfaud router 13

Turn up debug logging for service router

Code: Select all

omconflvl router 15

Stop/restart service router

Code: Select all

omoff -d 0 rtr
omon rtr


Once you’ve confirmed that ClamAV is working properly, you can reduce the log levels back to 7:

Code: Select all

omconfaud router 7
omconflvl router 7
omoff -d 0 rtr
omon rtr