Koozali.org: home of the SME Server

Contribs.org Forums => Koozali SME Server 10.x => Topic started by: Stefano on June 14, 2022, 05:26:06 PM

Title: email clamav check log location
Post by: Stefano on June 14, 2022, 05:26:06 PM

Hi all

on my SME 10 server fully updated, I see, in qpsmtpd's logs:

Code: [Select]


@4000000062a87f48218eb89c 48531 (data_post) virus::clamdscan: pass, clean


for a message with a infected, password protected zip file.

I tried to check clam* logs, but I didn't find anything more than clamd ones, which don't have any useful info.

Which is the log where I can dig a little  more?

TIA

Title: Re: email clamav check log location
Post by: Jean-Philippe Pialasse on June 14, 2022, 07:25:51 PM

by up to date do you include smeupdates-testing or not?

if not try

journalctl -u clamd

Title: Re: email clamav check log location
Post by: Stefano on June 15, 2022, 09:27:41 AM

Hi JPP.

applying last updates right now, in any case with journalclt I see:

Code: [Select]

Jun 15 09:21:50 sme9.mind-at-work.it systemd[1]: Stopped clamd scanner () daemon.
Jun 15 09:21:50 sme9.mind-at-work.it systemd[1]: Starting clamd scanner () daemon...
Jun 15 09:22:09 sme9.mind-at-work.it clamd[21971]: LibClamAV Warning: Detected duplicate databases /var/lib/clamav/main.cvd and /var/lib/clamav/main.cld, please manually remove one of them
Jun 15 09:22:14 sme9.mind-at-work.it systemd[1]: Started clamd scanner () daemon.

and nothing more (meaning no scan related lines/messages)