You probably have exactly the same problem I try to fix since one month with QMail-Scanner and ClamAV.
I had the same symptoms (tests working fine but real mails passing true, except for internal Mail-Scanner Virii).
Go see the smtpd log (/var/log/qmail/smtpd/current): you probably will see "access denied" lines each time your AV scanner is called. In my situation it is:
Tue, 11 Nov 2003 23:35:30 +0000:19285: --output of clamscan was:
/var/spool/qmailscan/tmp/mydomain.be106859013046119285/1068590131.19287-0.mydomain.be: Access denied.
/var/spool/qmailscan/tmp/mydomain.be 106859013046119285/1068590131.19287-1.mydomain.be: Access denied.
/var/spool/qmailscan/tmp/mydomain.be 106859013046119285/orig-mydomain.be106859013046119285: Access denied.
But I am in the same situation as you: nobody can show us "what" permissions are wrong...
Best, Guy
I have qmail-scanner installed using Sophos sweep and SpamAssassin.
When I run the test_installation script,
the innocuous mail arrives
the EICAR.COM e-mail is caught (presumably by perlscanner) and I get a message indicating this
the attached file with the EICAR test virus is caught (this would have to be by sweep) and I get a message indicating this
the spam gets through, probably because I haven't configured spamassassin properly just yet (that's fine, I can investigate that later).
Here's the strange thing, though -- if I send myself an e-mail from an external host (say my Yahoo account) containing or attaching a text file containing the EICAR test virus, qmail just delivers it. Same if I mail the file from a local account. If I scan the file with sweep, it detects the EICAR virus.
So what gives? Why is my test_installation script telling me it is working, when my real-world test seems to indicate otherwise?
Cheers
Stephen
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
