On 3 Nov 2006 at 15:42, Jon Hunt wrote: > It appears that I have everything correctly setup, but using the Eicar > test file I am unable to get ASSP/ClamAV to detect anything. > > I have ClamAV installed and I am using clamdservice.exe from the > Powertools found at http://www.bandsman.co.uk/clamav.htm to run clamd as > a service. I can confirm that both are running and clamd is creating a > log. I have File::Scan::ClamAV v1.8 installed using the instructions > found at http://www.asspsmtp.org/wiki/File-Scan-ClamAV and I get > File::Scan::ClamAV module version 1.8 installed and available appearing > in the maillog.txt.
What do you see in the clamd.log? It should be similar to: Thu Sep 21 14:20:32 2006 -> +++ Started at Thu Sep 21 14:20:32 2006 Thu Sep 21 14:20:32 2006 -> clamd daemon devel-20060920 (OS: cygwin, ARCH: i386, CPU: i686) Thu Sep 21 14:20:32 2006 -> Log file size limited to 1048576 bytes. Thu Sep 21 14:20:32 2006 -> Reading databases from .\data Thu Sep 21 14:20:39 2006 -> Loaded 97149 signatures. Thu Sep 21 14:20:39 2006 -> Bound to tcp port 3310 Thu Sep 21 14:20:39 2006 -> Setting connection queue length to 15 Thu Sep 21 14:20:39 2006 -> Archive: Archived file size limit set to 10485760 bytes. Thu Sep 21 14:20:39 2006 -> Archive: Recursion level limit set to 3. Thu Sep 21 14:20:39 2006 -> Archive: Files limit set to 1000. Thu Sep 21 14:20:39 2006 -> Archive: Compression ratio limit set to 250. Thu Sep 21 14:20:39 2006 -> Archive support enabled. Thu Sep 21 14:20:39 2006 -> Archive: Blocking encrypted archives. Thu Sep 21 14:20:39 2006 -> Archive: Blocking archives that exceed limits. Thu Sep 21 14:20:39 2006 -> Algorithmic detection enabled. Thu Sep 21 14:20:39 2006 -> Portable Executable support enabled. Thu Sep 21 14:20:39 2006 -> Mail files support enabled. Thu Sep 21 14:20:39 2006 -> OLE2 support enabled. Thu Sep 21 14:20:39 2006 -> HTML support enabled. Thu Sep 21 14:20:39 2006 -> Self checking every 1800 seconds. Thu Sep 21 14:55:49 2006 -> No stats for Database check - forcing reload Thu Sep 21 14:55:49 2006 -> Reading databases from .\data Thu Sep 21 14:56:00 2006 -> Database correctly reloaded (97149 signatures) Thu Sep 21 15:01:45 2006 -> stream 1808: Html.Phishing.Rock.Sanesecurity.06050500 FOUND Thu Sep 21 15:25:52 2006 -> SelfCheck: Database status OK. etc. If you have 'LogVerbose 1' in the clamd.conf file you'll also see several entries like this for every message going through: Wed Oct 18 15:57:09 2006 -> Accepted connection on port 1062, fd 7 > > I also have UseAvClamd:=1 set in assp.cfg. So how come ASSP appears to > make no attempt to scan any email that comes in? Anyone any ideas as I'm > tearing my hair out especially as wee seem to getting quite few viruses > coming in at the moment. HTH, Paul ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
