Pradeeper wrote:

Hi All

I'm implementing a Spam and a Virus wall using Exim4, SA-Exim,
SpamAssassin, Exiscan-ACL clamav-daemon and clamav on Debian Sarge.
This is stand before my mail server and scan my mails for spam and
viruses.

Spam blocking is fine, but problem is in virus thing.



You should submit this to exiscan-users list.

My /etc/clamav/clamav.conf is like this,

User clamav


User should be whatever user running running exim (recommended). In my case, user is exim.
Don't forget to change permission on clamav's db and log directory.
Another method which MIGHT work (haven't test it yet) is to make
clamav user a member of exim's group.


ScanMail


You don't need this with exiscan

ArchiveMaxFileSize 10M


I set it to something lower (1M) to reduce clamd's load.


In Exim4 config main area (I'm using monolithic config),

        av_scanner = clamd:127.0.0.1 3310

And ACL section has,

        deny message = This message contain malware ($malware_name)
         log_message = $sender_host_address tried sending $malware_name
          demime = *
          malware = *

Does order a matter in Exim ACLs?



Yes, order matters. This ACL should be the first lines in data ACL ( not rcpt ACL )

Everything seems fine, but it's not cleaning my mails?
When I see the logs..,
/var/log/clamav/clamd.log



I see only those, no hint about scanning mails :-(



You should look at exim's log first.


Regards,

Fajar
--
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


------------------------------------------------------- This SF.Net email is sponsored by: SourceForge.net Broadband Sign-up now for SourceForge Broadband and get the fastest 6.0/768 connection for only $19.95/mo for the first 3 months! http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to