@Paul: With clamd scanning disabled, mimedefang scans for spam using spamassassin and adds the relevant headers into the e-mail messages.
With the -d option, MIMEDefang does create work folders, e.g. : drwxr-x--- 4 defang defang 4096 Nov 24 14:12 mdefang-UBMc800 drwxr-x--- 2 defang defang 4096 Nov 24 14:38 mdefang-UBMCI0l drwxr-x--- 2 defang defang 4096 Nov 24 14:12 mdefang-UBMcl01 drwxr-x--- 2 defang defang 4096 Nov 24 14:12 mdefang-UBMcm02 drwxr-x--- 2 defang defang 4096 Nov 24 14:38 mdefang-UBMCQ0m drwxr-x--- 2 defang defang 4096 Nov 24 14:12 mdefang-UBMcu03 drwxr-x--- 2 defang defang 4096 Nov 24 14:12 mdefang-UBMcv04 drwxr-x--- 2 defang defang 4096 Nov 24 14:12 mdefang-UBMcV05 drwxr-x--- 4 defang defang 4096 Nov 24 14:14 mdefang-UBMeh06 drwxr-x--- 2 defang defang 4096 Nov 24 14:40 mdefang-UBMEL0n drwxr-x--- 2 defang defang 4096 Nov 24 14:40 mdefang-UBMEN0o drwxr-x--- 4 defang defang 4096 Nov 24 14:40 mdefang-UBMEO0p drwxr-x--- 4 defang defang 4096 Nov 24 14:14 mdefang-UBMez07 drwxr-x--- 2 defang defang 4096 Nov 24 14:41 mdefang-UBMF20q drwxr-x--- 2 defang defang 4096 Nov 24 14:42 mdefang-UBMG20r drwxr-x--- 2 defang defang 4096 Nov 24 14:42 mdefang-UBMGS0s drwxr-x--- 2 defang defang 4096 Nov 24 14:44 mdefang-UBMIE0t drwxr-x--- 2 defang defang 4096 Nov 24 14:44 mdefang-UBMIJ0u drwxr-x--- 2 defang defang 4096 Nov 24 14:45 mdefang-UBMJ20v drwxr-x--- 2 defang defang 4096 Nov 24 14:45 mdefang-UBMJT0w drwxr-x--- 2 defang defang 4096 Nov 24 14:20 mdefang-UBMk108 drwxr-x--- 4 defang defang 4096 Nov 24 14:20 mdefang-UBMke09 drwxr-x--- 2 defang defang 4096 Nov 24 14:21 mdefang-UBMl90a drwxr-x--- 4 defang defang 4096 Nov 24 14:48 mdefang-UBMLB0x drwxr-x--- 2 defang defang 4096 Nov 24 14:47 mdefang-UBMLF0y drwxr-x--- 2 defang defang 4096 Nov 24 14:22 mdefang-UBMmG0b drwxr-x--- 2 defang defang 4096 Nov 24 14:22 mdefang-UBMmK0c drwxr-x--- 4 defang defang 4096 Nov 24 14:50 mdefang-UBMOf0z drwxr-x--- 4 defang defang 4096 Nov 24 14:24 mdefang-UBMop0d drwxr-x--- 2 defang defang 4096 Nov 24 14:50 mdefang-UBMOu0A drwxr-x--- 2 defang defang 4096 Nov 24 14:25 mdefang-UBMpt0e drwxr-x--- 2 defang defang 4096 Nov 24 14:52 mdefang-UBMQE0B drwxr-x--- 2 defang defang 4096 Nov 24 14:53 mdefang-UBMRE0C drwxr-x--- 4 defang defang 4096 Nov 24 14:27 mdefang-UBMrj0f drwxr-x--- 2 defang defang 4096 Nov 24 14:54 mdefang-UBMSy0D drwxr-x--- 4 defang defang 4096 Nov 24 14:29 mdefang-UBMtt0g drwxr-x--- 2 defang defang 4096 Nov 24 14:55 mdefang-UBMTw0E drwxr-x--- 4 defang defang 4096 Nov 24 14:30 mdefang-UBMub0h drwxr-x--- 2 defang defang 4096 Nov 24 14:56 mdefang-UBMUM0F drwxr-x--- 2 defang defang 4096 Nov 24 14:56 mdefang-UBMUQ0G drwxr-x--- 4 defang defang 4096 Nov 24 14:30 mdefang-UBMur0i drwxr-x--- 2 defang defang 4096 Nov 24 14:56 mdefang-UBMUU0H drwxr-x--- 2 defang defang 4096 Nov 24 14:59 mdefang-UBMXW0I drwxr-x--- 2 defang defang 4096 Nov 24 14:34 mdefang-UBMyS0j drwxr-x--- 4 defang defang 4096 Nov 24 14:35 mdefang-UBMzN0k drwxr-x--- 4 defang defang 4096 Nov 24 15:02 mdefang-UBN2e0J drwxr-x--- 4 defang defang 4096 Nov 24 15:05 mdefang-UBN4X0K drwxr-x--- 4 defang defang 4096 Nov 24 15:05 mdefang-UBN5a0L drwxr-x--- 4 defang defang 4096 Nov 24 15:07 mdefang-UBN7K0M drwxr-x--- 2 defang defang 4096 Nov 24 15:08 mdefang-UBN8r0N drwxr-x--- 4 defang defang 4096 Nov 24 15:10 mdefang-UBNaS0O drwxr-x--- 2 defang defang 4096 Nov 24 15:11 mdefang-UBNbr0P drwxr-x--- 4 defang defang 4096 Nov 24 15:12 mdefang-UBNcB0R drwxr-x--- 2 defang defang 4096 Nov 24 15:12 mdefang-UBNcS0S drwxr-x--- 2 defang defang 4096 Nov 24 15:12 mdefang-UBNct0Q drwxr-x--- 2 defang defang 4096 Nov 24 15:39 mdefang-UBNDD1c drwxr-x--- 4 defang defang 4096 Nov 24 15:14 mdefang-UBNdX0T drwxr-x--- 2 defang defang 4096 Nov 24 15:14 mdefang-UBNeu0U drwxr-x--- 2 defang defang 4096 Nov 24 15:41 mdefang-UBNF81d drwxr-x--- 2 defang defang 4096 Nov 24 15:41 mdefang-UBNF91e drwxr-x--- 2 defang defang 4096 Nov 24 15:41 mdefang-UBNF91f drwxr-x--- 2 defang defang 4096 Nov 24 15:16 mdefang-UBNgD0W drwxr-x--- 4 defang defang 4096 Nov 24 15:16 mdefang-UBNgp0V drwxr-x--- 4 defang defang 4096 Nov 24 15:17 mdefang-UBNh00X drwxr-x--- 2 defang defang 4096 Nov 24 15:17 mdefang-UBNh710 drwxr-x--- 4 defang defang 4096 Nov 24 15:17 mdefang-UBNhA11 drwxr-x--- 2 defang defang 4096 Nov 24 15:44 mdefang-UBNI81g drwxr-x--- 2 defang defang 4096 Nov 24 15:44 mdefang-UBNIa1h drwxr-x--- 2 defang defang 4096 Nov 24 15:45 mdefang-UBNJT1i drwxr-x--- 4 defang defang 4096 Nov 24 15:20 mdefang-UBNkp12 drwxr-x--- 4 defang defang 4096 Nov 24 15:21 mdefang-UBNlf13 drwxr-x--- 4 defang defang 4096 Nov 24 15:47 mdefang-UBNLs1j drwxr-x--- 2 defang defang 4096 Nov 24 15:23 mdefang-UBNnq14 drwxr-x--- 2 defang defang 4096 Nov 24 15:25 mdefang-UBNp615 drwxr-x--- 2 defang defang 4096 Nov 24 15:25 mdefang-UBNpr16 drwxr-x--- 2 defang defang 4096 Nov 24 15:26 mdefang-UBNqE17 drwxr-x--- 2 defang defang 4096 Nov 24 15:33 mdefang-UBNxj18 drwxr-x--- 2 defang defang 4096 Nov 24 15:33 mdefang-UBNxr19 drwxr-x--- 2 defang defang 4096 Nov 24 15:34 mdefang-UBNyc1a drwxr-x--- 2 defang defang 4096 Nov 24 15:35 mdefang-UBNzW1b I left it running for a while so that many work folders are created and then I followed your instructions, i.e. stop the service, enable clamd detection within mimedefang and then restart the mimedefang service... and... VOILA! Scan detection is performed correctly! From clamd.log: /var/spool/MIMEDefang/mdefang-UBNNV00/Work/msg-19979-1.txt: OK /var/spool/MIMEDefang/mdefang-UBNNV00/Work/msg-19979-2.html: OK /var/spool/MIMEDefang/mdefang-UBNNV00/Work/INPUTMBOX: OK fd[11]: OK Hence, without the -d parameter, the issue is that the work folders are removed before clamd has a chance to scan them. However, the spool files created are plenty and they have to be purged somehow. I hope this last test provided a clearer insight towards a solution to the issue.. -----Original Message----- From: MIMEDefang [mailto:[email protected]] On Behalf Of Paul Murphy Sent: Friday, November 24, 2017 1:34 PM To: [email protected] Subject: Re: [Mimedefang] Error with mimedefang + clamd > I started mimedefang with the -D option, as indicated. However, no > working directories within /var/spool/MIMEDefang/ were created and, as a > result, I get in maillog (again): > >clamd: WARNING: lstat() failed on: >/var/spool/MIMEDefang/mdefang-UBKLc00/Work Did you check that MIMEDefang was correctly handling mail before you enabled Clamav? This would suggest that the issue is within MIMEDefang, and that the spool directories are never created, so there is no message to process. Also, my apologies - the option to keep working directories is "-d", not "-D" ... Paul. _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
