Take a look at /usr/share/doc/exim4-base/spec.txt.gz for details of what
the various directives mean. It sounds at the moment like you are
hoping for a different behavior than you have configured from your MTA,
so I would start with making sure the MTA is properly configured. If
you look through the docs in the exim4-base directory, there are several
that point to Debian-specific sources of information, such as mailing
lists and on-line documetnation. I would start there, and return here
if clamav does not work as expected after you are sure the MTA
integration is correct.
Hi,
i looked at the Readme.DEbian and found this here:
To enable clamav in the Debian exim4 packages, add
av_scanner = clamd:/var/run/clamav/clamd.ctl
(or if you've chosen tcp sockets)
av_scanner = clamd:127.0.0.1 3310
to the main configuration settings (a new file under
/etc/exim4/conf.d/main/ if split config is being used)
Then add the following to your data time acl:
deny message = This message contains a virus: ($malware_name) please
scan your system.
demime = *
malware = *
I have addes this lines to my configuration, but the ZIP Eicar testfile
comes directly in my mailbox, but i think some other virus mails are
blocked. This is some text of the rejectlog:
2005-11-28 20:05:01 H=cph254.neoplus.adsl.tpnet.pl (142528648)
[83.31.213.254] rejected EHLO or HELO 142528648: "Dropped IP-only or
IP-starting helo"
2005-11-28 20:05:39 H=p5485fedc.dip.t-dialin.net (146051280)
[84.133.254.220] rejected EHLO or HELO 146051280: "Dropped IP-only or
IP-starting helo"
2005-11-28 20:06:13 H=cm-85-152-224-117.telecable.es (144202488)
[85.152.224.117] rejected EHLO or HELO 144202488: "Dropped IP-only or
IP-starting helo"
2005-11-28 20:06:42 H=(146606752) [82.2.34.177] rejected EHLO or HELO
146606752: "Dropped IP-only or IP-starting helo"
2005-11-28 20:07:07 H=(146606752) [83.237.133.103] rejected EHLO or HELO
146606752: "Dropped IP-only or IP-starting helo"
2005-11-28 20:07:13 H=24-107-138-114.dhcp.stls.mo.charter.com (144151776)
[24.107.138.114] rejected EHLO or HELO 144151776: "Dropped IP-only or
IP-starting helo"
Can i test it with another virust test string?
_________________________________________________________________
Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit
Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu!
http://desktop.msn.de/ Jetzt gratis downloaden!
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
