On Fri, 2 Dec 2005 BitFuzzy <[EMAIL PROTECTED]> wrote:
> I've been using trashscan via procmail for over a year (with a few
> customizations) and haven't found any issues
> Though I'm not quite sure what he's intending to say with "Text of email
> not scanned" my suggestion would be to review his procmailrc, and
> trashscan settings
I'm trying to make sure that clamav scans the email and not just
attachments. Sometimes I get email with binary files encoded, mime or
uuencode, in the body of the email. I want clamav to scan the text body.
On Fri, 2 Dec 2005 Rob MacGregor <[EMAIL PROTECTED]> wrote:
> A little too terse - how does trashscan use clamav (is it using clamd
> or clamscan)?
>
> If clamd, have you left the defaults on in clamd.conf?
>
> If clamav, what options is it passing?
>
> (The short version is - the problem is most likely with trashscan)
Ok, here's everything in trashscan:
SCANDIR=$HOME/tmp # Temp directory for virus scans.
DECODER=uudeview # Decoder: "metamail" or "uudeview"
DECODPRG=/usr/bin/uudeview # Absolute path to decoder: uudeview
VSCANPRG=/usr/local/bin/clamscan # Absolute path to the virus scanner
VSCANOPT="--quiet --tempdir=$HOME/tmp --recursive --max-files=500 \
--max-space=30M --unzip=/usr/bin/unzip --unrar=/usr/bin/unrar \
--unarj=/usr/bin/unarj --zoo=/usr/bin/zoo --lha=/usr/bin/lha \
--jar=/usr/bin/unzip --tar=/bin/tar --tgz=/bin/tar"
# Parameters for the virus scanner.
VSCANVEX=1 # Exitcode of the virus scanner if a
virus was found
FORMAIL=formail # Absolute path to formail
PROCMAIL=procmail # Absolute path to procmail
SENDMAIL=sendmail # Absolute path to sendmail
CAT=cat # Absolute path to cat
GREP=grep # Absolute path to grep
LOGGER=logger # Absolute path to logger
LOGPRIO=mail.warn # Log level for logger
MKDIR=mkdir # Absolute path to mkdir
RM=rm # Absolute path to rm
SED=sed # Absolute path to sed
[EMAIL PROTECTED] # Receiver of virus alert messages
[EMAIL PROTECTED] # Sender of virus alert messages
[EMAIL PROTECTED] # Person to contact (appears in the
I've gone over the options and even removed ones to VSCANOPT and it didn't
do anything different.
My procmailrc:
# /etc/procmailrc
# Global procmail setup
SHELL=/bin/bash
PATH=$HOME/bin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin:
#1. Run TrashScan
:0
* ^Subject:
* !^X-Virus-Scan:
| /usr/local/sbin/trashscan
:0fhw
* ^X-Virus-Scan: Suspicious
* ^Subject: *
#* Any.other.conditions.you.need??
| sed -e 's/^Subject:/Subject: [virus]/'
Any ideas? Driving me crazy.
-pbr
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
