On Tue, 31 Mar 2009, Geoff Hull wrote:
It appears that the clamav-devel package is necessary for the full
functioning of clamd-0.95-1. Prior to installing clamav-devel, the
clamd init script would emit this message:
LibClamAV Warning: Cannot dlopen: file not found - unrar support
unavailable
The same message would occur when running clamscan from the
command-line.
What happens is that libclamav will look for the autoconf-generated
libclamunrar_iface.la file to see what version of the
libclamunrar_iface library it ought to open. If it doesn't find
that file (which isn't packaged with the rpmforge packages), it
looks for /libclamunrar_iface.so -- which is shipped with the
clamav-devel package.
Strange that it didn't need those symlinks for version 0.94.2 of the
clamav package. Has something else changed as well?
We are talking about ClamAV. Something *always* changes.
In 0.95, clamav-milter was overhauled. My custom 0.94-vintage
/etc/sysconfig/clamav-milter file didn't come close to working. Most
of the options now need to go into /etc/clamav-milter.conf, which is
new to 0.95 (see example, below).
A couple key options have been written out of clamav-milter in 0.95:
* Notifications and bounces: --from (-a), --bounce (-b), --headers
(-H), --postmaster (-p), --postmaster-only (-P), --template-file
(-t), and --template-headers (-1)
* Rate limiting: --max-children (-m), --dont-wait (-w), and
--timeout (-T)
* Temporary blacklisting: --dont-blacklist (-K) and --blacklist-time
(-k)
* &c., &c.
The best documentation of the changes to clamav-milter that I've found
so far are found in the clamav-0-95 distribution tarball:
clamav-0.95/contrib/make-clamav-milter-conf.pl
Eye-grep for calls to the wwarn() routine.
Here's my initial pass at /etc/clamav-milter.conf. The *Socket
directives must agree with your sendmail.cf and clamd.conf files. The
User must agree with all ClamAV configuration files.
----- %< -----
# working /etc/clamav-milter.conf
MilterSocket unix:/var/run/clamav/clamav-milter.sock
FixStaleSocket yes
User clamav
AllowSupplementaryGroups yes
ReadTimeout 60
PidFile /var/run/clamav/clamav-milter.pid
ClamdSocket unix:/var/run/clamav/clamd.sock
OnInfected Reject
AddHeader Yes
LogSyslog yes
LogFacility LOG_MAIL
LogInfected Basic
----- %< ------
I guess there were also several changes to the ClamAV API, but I don't
write or depend on third-party apps that use libclamav, so that wasn't
an issue for me.
--
Paul Heinlein <> [email protected] <> http://www.madboa.com/
_______________________________________________
users mailing list
[email protected]
http://lists.rpmforge.net/mailman/listinfo/users
