Either way - The result is the same so I went for the modified "ClamWin" option since it seemed more straightforward to me. My 2ยข regarding positive detection is: Just delete the e-mail w/o recipient notify. I used to notify but it's effectively spam since most virii are spewed out from zombie hosts anyway. But I digress...
As far as testing clamd goes - The GUI didn't immediately work for me and I didn't spend any time looking into it since I only need hMailServer & script support. I test clamd at the cmd line the same way you use it in hMailServer: "path\clamdscan.exe path\eicar.txt". If clamd detection works but the errorlevel is still 0 then you know you have the "bad" 0.92 build and should download it again. Ryan ----- Original Message ----- From: "Jeff Dunlap" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, December 21, 2007 09:18 Subject: Re: [clamav-win32] Getting started with ClamAV for Windows as aservice > Hi Ryan, > > I noticed that you have ClamWin checked, and in fact I had read a message > on this forum about checking that for ClamAV for Windows, but it seemed a > little weird to me since we are not using ClamWin. > > What I had done was to ensure that the ClamWin tab is totally blank (no > checkmarks nor any info in the fields). > > In the External virus scanner tab, I checked 'Use external scanner' > > Scanner Executable: > "c:\program files\clamav\clamdscan.exe" "%FILE%" > > Return Value > 1 > > In the General tab, I chose to 'Notifiy recipient' and to delete > attachments. > > What this configuration does is delete any infected attachments yet the > message is sent. The subject is automatically prefixed with VIRUS > DETECTED, and a short message indicating that the attachment was deleted. > > Best Regards, > > Jeff Dunlap > _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
