On Mon, Nov 28, 2005 at 01:26:04PM +0000, Markus Braun said: > >What does this mean? Not running, or not magically integrated with your > >MTA? ps -u clamav will tell you what processes are running as user > >clamav. If clamd and freshclam are not listed in the output, I will be > >very surprised. > > sorry for my bad english. So Clamd and freshclam is runnning as user clamav. > > >Again, not sure what you mean here - exim is rejecting a message with > >eicar, and yet delivering it anyway? That makes no sense. > > yes, he delivered it in my mailbox. > but i cant understand why? > > This is in the reject.log of exim4: > > [63.246.13.85] F=<[EMAIL PROTECTED]> rejected after DATA: This > message contains an unwanted file extension (com)
A file was rejected because it had the extension .com, not because of viral content. > But in my (/etc/exim4/vexim-acl-check-content.conf i have this part: > > # Reject virus infested messages. > warn message = This message contains malware ($malware_name) > malware = * > log_message = This message contains malware ($malware_name) > > So he dont warn me :-( The warn directive adds a log message, or a header (if used as message = X-virus: yes or some such) It does not reject mail or impede mail flow in any way. Look in your logs - do you see a line with the above warning? Take a look at /usr/share/doc/exim4-base/spec.txt.gz for details of what the various directives mean. It sounds at the moment like you are hoping for a different behavior than you have configured from your MTA, so I would start with making sure the MTA is properly configured. If you look through the docs in the exim4-base directory, there are several that point to Debian-specific sources of information, such as mailing lists and on-line documetnation. I would start there, and return here if clamav does not work as expected after you are sure the MTA integration is correct. Take care, -- -------------------------------------------------------------------------- | Stephen Gran | In those days he was wiser than he is | | [EMAIL PROTECTED] | now -- he used to frequently take my | | http://www.lobefin.net/~steve | advice. -- Winston Churchill | --------------------------------------------------------------------------
signature.asc
Description: Digital signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
