Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: ntblade on March 27, 2006, 12:43:49 PM

Title: How do I check if email virus scanning is working?
Post by: ntblade on March 27, 2006, 12:43:49 PM

Hi,
I have SME 7RC4 running fine so far.
How do I check if email virus scanning is working?
There is nothing to indicate this in the email headers and I can't find any of the config files.

Many thanks
Norrie

Title: How do I check if email virus scanning is working?
Post by: byte on March 27, 2006, 01:03:35 PM

google for eicar test file

Title: How do I check if email virus scanning is working?
Post by: ntblade on March 27, 2006, 01:09:24 PM

Quote from: "byte"

google for eicar test file

Did that.  Sent it.  Didn't get it but nowhere to check on the server what's going on.

N

Title: How do I check if email virus scanning is working?
Post by: byte on March 27, 2006, 01:28:42 PM

You should see in /var/log/qpsmtpd/current (think it's qpsmtpd not got server to hand)

Edit: Yes in that directory you will see ...

@4000000044282635160cdbfc 6105 virus::clamav plugin: Changing permissions on file to permit scanner access
@400000004428263519359ef4 6105 virus::clamav plugin: clamscan results: Eicar-Test-Signature
@40000000442826351943ac9c 6105 virus::clamav plugin: Virus(es) found: Eicar-Test-Signature
@40000000442826351964ec54 6105 552 Virus Found: Eicar-Test-Signature
@40000000442826390abdb7bc 6105 dispatching QUIT
@40000000442826390abdcb44 6105 221 example.com closing connection. Have a wonderful day.

Title: How do I check if email virus scanning is working?
Post by: ntblade on March 27, 2006, 01:45:35 PM

Great, thanks.

Now, is it possible to add a line like:

X-Virus Scanned by:  server@domain in the mail headers?

Thanks for the help.

N

Title: How do I check if email virus scanning is working?
Post by: byte on March 27, 2006, 08:05:15 PM

Quote from: "ntblade"

Now, is it possible to add a line like:

X-Virus Scanned by:  server@domain in the mail headers?

I would have thought so, I haven't a valid domain to try from but you should be able to see in the mail headers? have you tried it ?

If you try to send test virus from within network you get a email error 521 error as it should do correctly