Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Alex Schaft on August 01, 2001, 02:42:22 PM

Title: RAV Anti-virus
Post by: Alex Schaft on August 01, 2001, 02:42:22 PM

Hi,

I installed RAV anti-virus, and it's scaning all mail coming in and going out per the mail logs. I did a test with the test file from eicar.com, and it says the file is ok. Has anybody else had this?

Title: Re: RAV Anti-virus
Post by: guestFF on August 01, 2001, 09:12:31 PM

Dit you edit the config file with the correct parameters?

It's at /usr/local/rav8/etc/ravmd.conf

RequestedDeletion

Title: Re: RAV Anti-virus
Post by: Alex Schaft on August 02, 2001, 11:07:03 AM

Yes,

The mail log shows the as getting scanned, and passing

Title: Re: RAV Anti-virus
Post by: Alex Schaft on August 02, 2001, 11:07:05 AM

Yes,

The mail log shows the as getting scanned, and passing

Title: Re: RAV Anti-virus
Post by: Allen Rapini on August 03, 2001, 08:09:55 AM

I just installed the other day, and also tested with eicar. It caught eicar as well as a friendly sample of sircam32 which simeone was nice enough to send me...

Check that your domain listing is for both:
yourdomain.xxx
e-smith.yourdomain.xxx

It seems to be a peculiarity of the internal routing, and it doesn't treat the re-routed email the same as external mail.

If all else fails, post a portion of /var/log/maillog that has been stripped of sensitive info..

Title: Re: RAV Anti-virus
Post by: sidney on August 03, 2001, 05:18:39 PM

Good Morning,
    I am running 4.1.2 server what version of rav do I install
"qmail" or "sendmail". sorry for being off the topic.






thanks

Title: Re: RAV Anti-virus
Post by: Darrell May on August 04, 2001, 06:53:47 AM

sidney wrote:
>
> Good Morning,
>     I am running 4.1.2 server what version of rav do I install
> "qmail" or "sendmail". sorry for being off the topic.

Visit my HowTo for details, download and online registration.

http://netsourced.com/servers/docs/rav-howto.html

I've also just created a separate HowTo for scanning all server files:

http://netsourced.com/servers/docs/ravscan-howto.html

Regards,

Darrell

Title: Re: RAV Anti-virus
Post by: Hsing-Foo on August 05, 2001, 03:02:15 PM

Hi Darrell,

I followed your how-to's. With the Ravscan script i get the following message delivered:
---------------------------
/etc/cron.daily/ravscan:

/etc/cron.daily/ravscan: line 17: 10347 Segmentation fault      /usr/local/rav8/bin/ravav / -RP /usr/local/rav8/rave -ALL -CLEAN -HEUR ON -SMART -UNZIP -MAIL -QRT /var/spool/rav/quarantine -REPORT /root/ravscan.rpt >/dev/null 2>&1
Null message body; hope that's ok
------------------------

and I got a core dump.

Any suggestions on what's wrong?

Thanks,

RequestedDeletion