Marko,
on console all oke, clamscan detects eicar.zip as testfile
Good. >> Rise the log level and see how decoding, and file type >> detection goes
in amavis log i find this: Jul 4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd) result: /var/amavis/tmp/amavis-20120704T174152-01362-FZFRqVwJ/parts: OK\n Jul 4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd): CLEAN Jul 4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd) result: clean
You omitted the part od the log that shows how decoding and file(1) utility is doing. > is it correct that it pass? as u said its a test filen and > not a virus. No, this is not correct. Either a test mail message did not contain a clean copy of eicar in body, or there was a problem in parsing or decoding of a message. Double-check your test message for proper MIME structure, and show the full log. Mark
