Hi! I have defined connection to av_scanner as below: av_scanner = clamd:127.0.0.1 3310 : 192.168.254.10 3310
On localhost clamav is turned off. When I senr eixar test I got in exim_main.log: # exigrep 1X1cPB-0001CM-E1 /var/log/exim/exim_main.log +++ 1X1cPB-0001CM-E1 has not completed +++ 2014-06-30 16:18:01 1X1cPB-0001CM-E1 DKIM: d=cibet.pl s=120625 c=relaxed/relaxed a=rsa-sha256 [verification succeeded] 2014-06-30 16:18:01 1X1cPB-0001CM-E1 malware acl condition: clamd: failed to connect to 127.0.0.1: couldn't connect to any host: Connection refused 2014-06-30 16:19:01 1X1cPB-0001CM-E1 H=poczta3.cibet.pl (poczta.cibet.pl) [77.252.119.98] I=[88.198.102.195]:25 X=TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256 F=<[email protected]> rejected after DATA: Virus found / znaleziono wirusa :Eicar-Test-Signature In clamd.log on remote host I've got: Mon Jun 30 16:18:01 2014 -> instream(local): Eicar-Test-Signature(3cc1cc089e6737293a05a391d62a2a56:1676) FOUND So message "couldn't connect to any host:" is a little misleading, exim can connect to any host (but not to localhost). Have you got any idea why clamd uses word "local" even when connection is from remote host? Regards, Marcin Exim version 4.83_RC2 #2 built 20-Jun-2014 13:15:47 Copyright (c) University of Cambridge, 1995 - 2014 (c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2014 Berkeley DB: Berkeley DB 4.8.30: (2013-10-04) Support for: crypteq iconv() IPv6 OpenSSL Content_Scanning DKIM Old_Demime OCSP Experimental_SRS Experimental_DSN Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch dbm dbmjz dbmnz dsearch passwd pgsql Authenticators: cram_md5 plaintext spa Routers: accept dnslookup ipliteral manualroute queryprogram redirect Transports: appendfile/mailstore autoreply lmtp pipe smtp Fixed never_users: 0 Size of off_t: 8 Configuration file is /etc/exim/exim.conf -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
