Setting Up ClamAV

[thejoker101]

I would just like to double check that I set this up correctly.

I installed ClamAV, then went through the Spam and AntiVirus PDF from the knowledgebase.

I set up my ALL-ROUTES.VIR file, it is set up the same way as the example. I left omvscan.cfg alone, because it defaults for ClamAV, though I did copy it to /var/opt/scalix/sys and changed permissions.

I also made a few changes to the smtpd.cfg file to take care of anonymous requests and auth-mismatch. Both as described in the antivirus PDF.

Anything else I need to do? I am able to send and receive emails still. Is there a way to tell if it's getting scanned?

[thejoker101]

I take that back, I forgot to restart and when I did, I could no longer send or receive mails.

I took a look in /var/opt/scalix/logs/fatal and I see this:

ERROR Service Router(Service Router) 09.07.05 13:02:04
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: SCAN:/var/opt/scalix/data/0000002/00001h1
Reply received: 503 Configuration for anti-virus engine "ClamAV" broken - cannot
execute "/usr/bin/clamdscan"
Pid of logging process: 6439


ERROR Service Router(Service Router) 09.07.05 13:02:04
[OM 5183] A Mapper error has been detected.
Pid of logging process: 6439

[thejoker101]

I fixed that error, but got a different one now.

In omvscan.cfg, the location of clamdscan is specified like this: CLAMAV_ENGINE=/usr/bin/clamdscan. Only, for me at least - not sure if this is how it should be, clamdscan is located here: /usr/local/bin/clamdscan.

So... here's the new, much more cryptic error:

ERROR Service Router(Service Router) 09.07.05 16:22:35
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: SCAN:/var/opt/scalix/data/0000005/00001kh
Reply received: 504 anti-virus engine "ClamAV" exhibits unexpected behavior
Pid of logging process: 6580


ERROR Service Router(Service Router) 09.07.05 16:22:35
[OM 5183] A Mapper error has been detected.
Pid of logging process: 6580

[ScalixSupport]

You should edit /var/opt/scalix/sys/omvscan.cfg so that OMAV_LOGLEVEL=3 and then restart the Service Router.

This will write verbose logging to /var/opt/scalix/logs/omvscan.log (as defined by OMAV_LOGFILE).

This will give you an idea as to what the cause of the problem is.

Cheers

Dave

[thejoker101]

After consulting the clamav irc channel, it was suggested that I start clamav in the background and then try sending mails, that seemed to fix the situation.

I'll update later if necessary.