[Mimedefang] clamd versus clamav

[Ole Craig]

On 12/12/03 at 10:51, 'twas brillig and Ole Craig scrobe:
> 	Having just upgraded to clamav 0.65, I thought I'd setup clamd
> rather than clamav scanning from MIMEDefang, but I'm running into
> problems. It doesn't look like MD is actually talking to clamd; I
> don't see any log entries in the clamd log to indicate that anything's
> using it, and MD's not catching a zipped Mimail.F. (But it's not
> tempfailing either.)

Forgot to add: 

	When I run clamdscan manually on the extracted zipfile, it
correctly detects it:

    clamdscan readnow.zip
    /root/readnow.zip: Worm.Mimail.F FOUND
     
    ----------- SCAN SUMMARY -----------
    Infected files: 1
    Time: 0.005 sec (0 m 0 s)


	Other possibly-pertinent details...
[root at loki root]# ls -lsd /var/spool/MIMEDefang/clamd.sock
   0 srwxrwxrwx    1 clamav   clamav          0 Dec 12 10:56 /var/spool/MIMEDefang/clamd.sock
[root at loki root]# ls -lsd /var/spool/MIMEDefang/
  16 drwxrwx---    9 defang   defang      16384 Dec 12 11:19 /var/spool/MIMEDefang/
[root at loki root]# groups clamav
clamav : clamav defang


		Ole
-- 
Ole Craig * UNIX, linux, SMTP-ninja; news, web; SGI martyr * CS Computing
Facility, UMass * <www.cs.umass.edu/~olc/pgppubkey.txt> for public key
[...] Oh, shed thy mercy and thy grace / On those who venture into space.
			(R. A. Heinlein)