Looks good. clamd is listening on a unix socket though, this might give problems in chrooted environments.
This is not the case anymore. The Howto has been changed and now uses the real clamdscan.
-Jim
This is still the case on freebsd, it fixed my problem after reading this message, rename clamdscan to clamdscan.org ln -s /usr/local/bin/clamscan /usr/local/bin/clamdscan
All of a sudden my emails are being scanned and it caught the test_installation.sh emails.
But you're not fixing the real problem, which is most likely
a) a communication problem between the client (clamdscan) and the server (clamd), eg a wrong socket path, or
b) a permissions problem, where clamd can't read the files it's supposed to scan. Clamd needs read privileges (qmr.org states the user has to be "qscand")
I can't tell which one it is without the actual error message. Additionally, I can't find from a quick glance thru qmr.org how they set up clamav's client/server communication, and if qmailscanner runs chrooted (and where).
Thomas _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Mon Dec 20 11:02:49 2004 -> +++ Started at Mon Dec 20 11:02:49 2004
Mon Dec 20 11:02:49 2004 -> clamd daemon 0.80 (OS: freebsd4.5, ARCH: i386, CPU: i386)
Mon Dec 20 11:02:49 2004 -> Log file size limited to 1048576 bytes.
Mon Dec 20 11:02:49 2004 -> Running as user qscand (UID 1020, GID 1020)
Mon Dec 20 11:02:49 2004 -> Reading databases from /usr/local/share/clamav
Mon Dec 20 11:02:51 2004 -> Protecting against 28526 viruses.
Mon Dec 20 11:02:51 2004 -> Unix socket file /var/log/clamav/clamd
Mon Dec 20 11:02:51 2004 -> Setting connection queue length to 15
Mon Dec 20 11:02:51 2004 -> Archive: Archived file size limit set to 10485760 bytes.
Mon Dec 20 11:02:51 2004 -> Archive: Recursion level limit set to 5.
Mon Dec 20 11:02:51 2004 -> Archive: Files limit set to 1000.
Mon Dec 20 11:02:51 2004 -> Archive: Compression ratio limit set to 250.
Mon Dec 20 11:02:51 2004 -> Archive: Limited memory usage.
Mon Dec 20 11:02:51 2004 -> Archive support enabled.
Mon Dec 20 11:02:51 2004 -> Archive: RAR support disabled.
Mon Dec 20 11:02:51 2004 -> Portable Executable support enabled.
Mon Dec 20 11:02:51 2004 -> Mail files support enabled.
Mon Dec 20 11:02:51 2004 -> OLE2 support enabled.
Mon Dec 20 11:02:51 2004 -> HTML support enabled.
Mon Dec 20 11:02:51 2004 -> Self checking every 600 seconds.
> [....]
Mon, 20 Dec 2004 11:03:43 PST:15104: from='Qmail-Scanner Test <[EMAIL PROTECTED]>', subj='Qmail-Scanner viral test (2/4): checking perlscanner...', via local process 15104Does it change when you comment out "LocalSocket" and "FixStaleSocket" (if enabled) in clamd.conf, and add
Mon, 20 Dec 2004 11:03:43 PST:15104: error_condition: X-Antivirus-DLLD.ORG-1.24-st-qms: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2
Mon, 20 Dec 2004 11:03:43 PST:15104: ------ Process 15104 finished. Total of 0.287283 sec
TCPSocket 3310
TCPAddr 127.0.0.1
to it? This enables clamd/clamdscan to communicate over IP sockets, to circumvent possible chroot() problems.
Thomas _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
