On 2015-11-19, Daniel L. Srebnick <d...@islenet.com> wrote: > David B. Funk asked: > >> Have you used the ClanAV.pm plugin successfully in a previous SA kit? > > No, I have not used it previously. > >> There are some requirements that must be satisfied (must have a clamd > running on the same machine as spamd, File::Scan::ClamAV perl module, etc). > > All requirements have been met as far as I can tell. > > I can submit a file to clamd manually from the CLI via clamscan and get a > result as shown in a previous post.
clamscan does not submit files to clamd, it's a standalone scanner. You need to test using clamdscan if you want to see whether clamd is working. charliesangels-root# clamscan --no-summary /var/tmp/testmsg /var/tmp/testmsg: OK charliesangels-root# clamdscan --no-summary /var/tmp/testmsg ERROR: Could not lookup : Servname not supported for ai_socktype charliesangels-root# /etc/init.d/clamd start clamd starting. charliesangels-root# clamdscan --no-summary /var/tmp/testmsg /var/tmp/testmsg: OK -- If you have management that would blame you for not warning them that there would be a major downtime if the building burned down, you need a new job. --Chris Siebenmann on his blog