On Mon, 2004-08-30 at 18:33, Internet Helpdesk wrote: > > For example: > > ./source_virus_count.pl -l amavis -f amavis/amavis.log -r -c 10 > For this to work for milter, what logging to I need to have? Do I enable > verbose logging in clamav.conf? Right now In my log I have: > ---- > Mon Aug 2 14:00:49 2004 -> /home/clamquar/040802/msg.TwmNG2: Worm.Bagle.N > FOUND > Mon Aug 2 14:01:38 2004 -> /home/clamquar/040802/msg.1dEnWr: > Worm.SomeFool.P FOUND
You will need "LogSyslog" in your clamav.conf. I'm not sure if you need anything special in your sendmail.mc but I have the following. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/spool/MIMEDefang/clmilter.sock, F=T, T=S:45s;R:45s')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') On Redhat this would create similar log entries to the following in /var/log/maillog. Other platforms and variations of Linux should work fine. Aug 31 08:37:19 ns2b sendmail[5491]: i7VCbAus005491: from=<[EMAIL PROTECTED]>, size=41727, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=rrcs-se-24-227-44-226.biz.rr.com [24.227.44.226] Aug 31 08:37:19 ns2b clamav-milter[23178]: i7VCbAus005491: stream: Worm.SomeFool.P Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]> Aug 31 08:37:19 ns2b sendmail[5491]: i7VCbAus005491: Milter: data, discard Aug 31 08:37:19 ns2b sendmail[5491]: i7VCbAus005491: discarded ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
