Excellent! Thanks Tim, that helps a lot. I'm still really confused about the clamd.conf file. According to sources on the net (and I thought I read this in clamdoc), Clamuko does use clamd. But who the heck knows.
Either way, when I run a scan using "clamscan" or "clamdscan", or Clamuko simply finds a virus, I get no message that a virus was found, except in the log. All I get was something like "error accessing file". I want both myself (root) and users to get a message saying virus found if either Clamuko picks it up, or a manual scan. I'm not concerned with emailing right now. These are standalone systems. Any ideas on that? Thanks again. Scott J. Woodford Information Systems Security Manager Modern Technology Solutions, Inc. (703) 212-8870 Ext. 146 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timothy Omer Sent: Wednesday, June 08, 2005 2:26 PM To: 'ClamAV users ML' Subject: RE: [Clamav-users] ERROR: Clamuko: Can't register with Dazuko > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Scott Woodford > Sent: 08 June 2005 19:13 > To: 'ClamAV users ML' > Subject: RE: [Clamav-users] ERROR: Clamuko: Can't register with Dazuko > > Thanks Tim. I have read (and practically memorized) the entire > clamdoc.pdf file. I am very familiar with 4.1.1 and 5.3. Anyway, I > was able to figure out my problem, but I have another. > > My problem was that dazuko was not initializing after I restarted the > machine. I have no idea why. Any idea on how to change that? > > Also, I cannot get the "VirusEvent" line in clamd.conf to work properly. > Onacess is working great, because it finds my test virus, but I get no > notification such as "Virus found". I have uncommented the VirusEvent > line and it's still not working. Any ideas? > > > Scott J. Woodford > Information Systems Security Manager > Modern Technology Solutions, Inc. > (703) 212-8870 Ext. 146 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Timothy > Omer > Sent: Wednesday, June 08, 2005 1:58 PM > To: 'ClamAV users ML' > Subject: RE: [Clamav-users] ERROR: Clamuko: Can't register with Dazuko > > > > > Hi all, > > > > I'm having trouble getting Clamuko working. My system is RedHat 9.0. > > I installed Dazuko just fine, and was able to run the example > > program with no problems. I also got ClamAV installed fine, and > > tested it without fail. > > I > > edited clamd.conf, and enabled the following: > > > > ClamukoScanOnAccess > > ClamukoScanOnOpen > > ClamukoScanOnExec > > > > I used a test virus, and Clamuko didn't pick it up. I tried running > > clamd just for the heck of it, and it shows "ERROR: Clamuko: Can't > > register with Dazuko" in the log file. Any ideas? Thanks in > > advance for any help you can give me. > > > > Scott > > > > > > _______________________________________________ > > http://lurker.clamav.net/list/clamav-users.html > [Timothy Omer] > > Have you looked at the clamav doc? Located here: > http://www.clamav.net/doc/0.85.1/clamdoc.pdf > > Read 4.1.1 and 5.3 (if you have the time read it all!) > > Tim > > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html > > > > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html [Timothy Omer] I had the same problem :-), looking at the log /var/log/clamav/clamd.log I found that Dazuko was being loaded after clamd. To start Dazuko and reload clamd I added this to /etc/rc.local #Inserts Dazuko as a module modprobe dazuko #Starts clamd /usr/sbin/clamd (maybe not the best way, I am new to this!) The "VirusEvent" line in clamd.conf does not work with Clamuko (As clamd uses that config file not Clamuko) I use this in my crontab to email me when Clamuko finds a virus... #Does a scan with clamav @ 2am, sends email if there is a problem 0 2 * * * /usr/local/bin/clamscan --no-summary --infected -i -r / || mail -s "A virus has been found on the Office Server" [EMAIL PROTECTED] Hope this helps, Tim _______________________________________________ http://lurker.clamav.net/list/clamav-users.html _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
