Shot myself in the foot with this one. Here's the story: I made the change to qmail-scanner.pl by copying the file to qmail-scanner.tmp, editing the .tmp then moving the .tmp back to qmail-scanner.pl. But when you do this as root, the .tmp file is owned by root, but qmail-scanner.pl *must* be owned by qscand. Once I got the ownerships back as it should be, I could set Q-S.pl to use clamdscan again.
BTW, I posted this problem twice, since the first message took a few days (!) to appear on the list, and I thot it had "got lost". > -----Original Message----- > From: Micha Silver [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 29, 2004 11:14 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Clamscan; clamdscan > > > Last night I made a small change to qmail-scanner.pl- I added > 'worm.sco.a' to the array $silent_viruses_array. (To prevent > sending Virus Found messages to innocent "sender" addresses) > It now looks like: > > my > @silent_viruses_array=('klez','bugbear','worm.sco.a','hybris', > 'yaha','braid' > ,'nimda','tanatos','sobig','winevar','palyh','fizzer','gibe',' > cailont','love > lorn','swen','dumaru','sober','hawaii','holar-i'); > > From that moment on, clamav stopped recognizing virii. > Disallowed extensions > - *.scr etc. - were still being blocked. I was running > clamdscan as the clamscan_binary in the Q-S.pl script. This > morning I change back to calling the regular clamscan for > each virus, and immediately CLAMSCAN:Worm.SCO.A started > appearing in the logs. > > I'd like to go back to clamdscan to save memory and scanning > time. What might I have done to cause clamdscan to fail?? > > TIA > --Micha > > > ------------------------------------------------------- > The SF.Net email is sponsored by EclipseCon 2004 > Premiere Conference on Open Tools Development and Integration > See the breadth of Eclipse activity. February 3-5 in Anaheim, > CA. http://www.eclipsecon.org/osdn > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users > ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
