2008/4/2  <[EMAIL PROTECTED]>:
>
>  ----- "tete momo" <[EMAIL PROTECTED]> wrote:
>
>
>  > Tue Apr  1 22:25:53 2008 -> Running as user amavis (UID 102, GID 442)
>
> > Tue Apr  1 22:25:57 2008 -> Unix socket file
>  > /var/run/clamav/clamd.sock
>
>  Tips: kalau anda sering melakukan random changes tanpa melihat lognya,
>  hal ini akan menyulitkan anda sendiri.
>
>  Jadi, karena amavisd ini butuh membaca socket clamd maka anda harus
>  menyamakan user yang menjalankan ke dua daemon tersebut. Jika anda
>  ubah daemon clamd ke user amavis, maka anda harus mengubah SEMUA
>  direktori yang digunakan oleh clam ke user amavis, sebagai permulaan
>  silakan diperiksa file clamd.conf dan freshclam.conf di direktori
>  mana saja clam ini. Jangan lupa untuk mengecek file logrotate dan/atau
>  crontab yang mungkin masih ada script untuk clam.
>
>  Rgds,
>  Asfihani
>

Terima kasih responnya Mas.

Di clamd.conf dan di freshclam.conf, clam semuanya di direktori /var/run/clamav.

clamav dan freshclam berjalan dengan user amavis.
Tidak ada script untuk clam di cron.

Wah, ternyata belum ada logrotate :(, belajar dulu nih tetang logrotate.

Terakhir sudah saya kembalikan ownership /var/run/clamav dan
/var/lib/clamav ke amavis

chown -R amavis:amavis /var/run/clamav
chown -R amavis:amavis  /var/lib/clamav

setelah itu konfigurasi di amavisd.conf saya ganti dengan

#   \&ask_daemon, ["CONTSCAN {}\n", "/usr/sbin/clamd"],
   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.sock"],


Log clamav ketika amavis direstart :

Wed Apr  2 09:21:57 2008 -> +++ Started at Wed Apr  2 09:21:57 2008
Wed Apr  2 09:21:57 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH:
i386, CPU: i686)
Wed Apr  2 09:21:57 2008 -> Running as user amavis (UID 102, GID 442)
Wed Apr  2 09:21:57 2008 -> Log file size limited to 2097152 bytes.
Wed Apr  2 09:21:57 2008 -> Reading databases from /var/lib/clamav
Wed Apr  2 09:21:57 2008 -> Not loading PUA signatures.
Wed Apr  2 09:22:02 2008 -> Loaded 410490 signatures.
Wed Apr  2 09:22:02 2008 -> Unix socket file /var/run/clamav/clamd.sock
Wed Apr  2 09:22:02 2008 -> Setting connection queue length to 15
Wed Apr  2 09:22:02 2008 -> Archive: Archived file size limit set to
10485760 bytes.
Wed Apr  2 09:22:02 2008 -> Archive: Recursion level limit set to 5.
Wed Apr  2 09:22:02 2008 -> Archive: Files limit set to 1000.
Wed Apr  2 09:22:02 2008 -> Archive: Compression ratio limit set to 200.
Wed Apr  2 09:22:02 2008 -> Archive support enabled.
Wed Apr  2 09:22:02 2008 -> Algorithmic detection enabled.
Wed Apr  2 09:22:02 2008 -> Portable Executable support enabled.
Wed Apr  2 09:22:02 2008 -> ELF support enabled.
Wed Apr  2 09:22:02 2008 -> Mail files support enabled.
Wed Apr  2 09:22:02 2008 -> Mail: Recursion level limit set to 64.
Wed Apr  2 09:22:02 2008 -> OLE2 support enabled.
Wed Apr  2 09:22:02 2008 -> PDF support disabled.
Wed Apr  2 09:22:02 2008 -> HTML support enabled.
Wed Apr  2 09:22:02 2008 -> Self checking every 1800 seconds.
Wed Apr  2 09:56:06 2008 -> No stats for Database check - forcing reload
Wed Apr  2 09:56:06 2008 -> Reading databases from /var/lib/clamav
Wed Apr  2 09:56:11 2008 -> Database correctly reloaded (410490 signatures)
Wed Apr  2 10:30:10 2008 -> SelfCheck: Database status OK.


Log mail.log seperti ini apakah menunjukkan bahwa clamav bekerja
melakukan scan terhadap pesan yang masuk ?

Apr  2 19:42:35 mail amavis[25633]: (25633-03) Passed CLEAN, LOCAL
[127.0.0.1] [127.0.0.1] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,
Message-ID: <[EMAIL PROTECTED]>, mail_id:
FwRgxoIjFA37, Hits: 0.287, size: 1375, queued_as: BAF325E248, 1235 ms


Terima kasih

BR

tm

Reply via email to