Koozali.org: home of the SME Server

How do I check if email virus scanning is working?

Offline ntblade

  • *
  • 252
  • +0/-0
How do I check if email virus scanning is working?
« on: March 27, 2006, 12:43:49 PM »
Hi,
I have SME 7RC4 running fine so far.
How do I check if email virus scanning is working?
There is nothing to indicate this in the email headers and I can't find any of the config files.

Many thanks
Norrie

Offline byte

  • *
  • 2,183
  • +2/-0
How do I check if email virus scanning is working?
« Reply #1 on: March 27, 2006, 01:03:35 PM »
google for eicar test file
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!

Offline ntblade

  • *
  • 252
  • +0/-0
How do I check if email virus scanning is working?
« Reply #2 on: March 27, 2006, 01:09:24 PM »
Quote from: "byte"
google for eicar test file


Did that.  Sent it.  Didn't get it but nowhere to check on the server what's going on.

N

Offline byte

  • *
  • 2,183
  • +2/-0
How do I check if email virus scanning is working?
« Reply #3 on: March 27, 2006, 01:28:42 PM »
You should see in /var/log/qpsmtpd/current (think it's qpsmtpd not got server to hand)

Edit: Yes in that directory you will see ...

@4000000044282635160cdbfc 6105 virus::clamav plugin: Changing permissions on file to permit scanner access
@400000004428263519359ef4 6105 virus::clamav plugin: clamscan results: Eicar-Test-Signature
@40000000442826351943ac9c 6105 virus::clamav plugin: Virus(es) found: Eicar-Test-Signature
@40000000442826351964ec54 6105 552 Virus Found: Eicar-Test-Signature
@40000000442826390abdb7bc 6105 dispatching QUIT
@40000000442826390abdcb44 6105 221 example.com closing connection. Have a wonderful day.
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!

Offline ntblade

  • *
  • 252
  • +0/-0
How do I check if email virus scanning is working?
« Reply #4 on: March 27, 2006, 01:45:35 PM »
Great, thanks.

Now, is it possible to add a line like:

X-Virus Scanned by:  server@domain in the mail headers?

Thanks for the help.

N

Offline byte

  • *
  • 2,183
  • +2/-0
How do I check if email virus scanning is working?
« Reply #5 on: March 27, 2006, 08:05:15 PM »
Quote from: "ntblade"


Now, is it possible to add a line like:

X-Virus Scanned by:  server@domain in the mail headers?



I would have thought so, I haven't a valid domain to try from but you should be able to see in the mail headers? have you tried it ?

If you try to send test virus from within network you get a email error 521 error as it should do correctly
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!