David B. Funk asked: > Have you used the ClanAV.pm plugin successfully in a previous SA kit?
No, I have not used it previously. > There are some requirements that must be satisfied (must have a clamd running on the same machine as spamd, File::Scan::ClamAV perl module, etc). All requirements have been met as far as I can tell. I can submit a file to clamd manually from the CLI via clamscan and get a result as shown in a previous post. I can manually scan a message via spamc as shown in a previous post and the ClamAV.pm plugin does get called as you can see by the X-Spam-Virus: header which is added by ClamAV.pm. No errors are being thrown by either clamd or spamc. I could add voluminous logs if it would be useful somehow. -----Original Message----- From: David B Funk [mailto:dbf...@engineering.uiowa.edu] Sent: Wednesday, November 18, 2015 20:10 To: dans <d...@islenet.com> Cc: users@spamassassin.apache.org Subject: Re: ClanAV.pm Plugin Not Working On Wed, 18 Nov 2015, dans wrote: > spamassassin version: 3.4.1 running on FC 22 > > Anti spam functions running file. I want to use the ClamAV.pm plugin. > clamav.pm and clamav.cf are installed in /etc/mail/spamassassin. > File::Scan::ClamAV was installed via CPAN. > > Every file scanned returns a hash error in the X-Spam-Virus header line. > Here is a scan of my test message which contains eicar: > > spamc -l </somemessage.txt > > X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on myhost > X-Spam-Level: > X-Spam-Status: No, score=0.1 required=1.0 tests=BAYES_00,MISSING_DATE, > MISSING_MID,NO_RECEIVED,NO_RELAYS,TAB_IN_FROM autolearn=no > autolearn_force=no > version=3.4.1 > X-Spam-Virus: Error (File::Scan::ClamAV=HASH(0x3a092c8)->errstr()) > From: m...@me.com > To: y...@you.com > Subject: Test > > This is a spam test. > > X5O!P%@AP[4\PZX54(P^)7CC)7}$[REDACTED]EICAR-STANDARD-ANTIVIRUS-TEST-FI > LE!$H+H* > > So no matter what the file I get the Error with a hash value. A > rescan will provide a different hash value. > > Suggestions please? Have you used the ClanAV.pm plugin successfully in a previous SA kit? There are some requirements that must be satisfied (must have a clamd running on the same machine as spamd, File::Scan::ClamAV perl module, etc). What corresponding errors are being logged by your spamd? What if anything is being logged by your clamd? (you may need to turn up the logging level in your clamd). -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{
