Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: pbozz on September 26, 2005, 06:01:42 PM

Title: jaspers spam. clamav. and sme 6.01 ...eicar test file
Post by: pbozz on September 26, 2005, 06:01:42 PM

I'm running an updated and clean 6.01 with jaspers wonderufl spamassasin and antivirus installed.

When I email the eicar.com test file, nothing happens and it passes through to my email.  How can I test if the antivirus is setup properly?  
Or even better, wheat shoud I see when it detects a virus?

Also note:  I'm remote (but setup as a local network), not on the VPN, sending email from and to myself.

TIA

Title: jaspers spam. clamav. and sme 6.01 ...eicar test file
Post by: mrjhb3 on September 27, 2005, 05:05:58 AM

Have you checked in server-manager to make sure you have enabled antivirus?

You can tail -f /var/log/amavis-ng/amavis-ng.log then send your file.  If amavis is working, you should see some action in the log.

JB

Title: jaspers spam. clamav. and sme 6.01 ...eicar test file
Post by: pbozz on September 27, 2005, 05:10:02 AM

i checked the server manager and the log has some entry but not of anythig being scanned.  I sent the eicar.com file from an outside account, never got the email, never saw a response.  Of course now I think the email may have been caught from the outside ISP.

But either way, I would think that the log would show that it's scanning r at least checking.  And yes, I have antivirus turned on in thr panel for incoming emails only.

Title: jaspers spam. clamav. and sme 6.01 ...eicar test file
Post by: pbozz on September 27, 2005, 05:11:41 AM

This is the extent of the log:

Sep 26 11:56:57 corp amavis[11435]: Unpacking message in /var/spool/amavis-ng/am  
avis-unpack-43384479-2cab                                                        
Sep 26 11:56:57 corp amavis[11435]: AMAVIS: Determined 00000000 to be type messa  
ge/rfc822                                                                        
Sep 26 11:56:57 corp amavis[11435]: AMAVIS: Determined 00000001 to be type text/  
plain                                                                            
Sep 26 11:56:57 corp amavis[11435]: Not attempting to unpack 00000001            
Sep 26 11:56:57 corp amavis[11435]: AMAVIS: Determined 00000002 to be type text/  
plain                                                                            
Sep 26 11:56:57 corp amavis[11435]: Not attempting to unpack 00000002            
Sep 26 11:56:57 corp amavis[11435]: AMAVIS::MTA::Qmail: Accepting message        
Sep 26 11:57:03 corp amavis[11435]: AMAVIS::MTA::Qmail: /var/qmail/bin/qmail-spa  
mc exited: 0                                                                      
Sep 26 11:57:03 corp amavis[11435]: AMAVIS: Cleaning up.                          
Sep 26 11:57:03 corp amavis[11435]: AMAVIS: Done.                                

And the server handles about 1000 incoming and outgoing emails per day.

Title: jaspers spam. clamav. and sme 6.01 ...eicar test file
Post by: pbozz on September 27, 2005, 06:27:27 AM

i think it's working.