[Mimedefang] clamd versus clamav
Ole Craig
olc at cs.umass.edu
Fri Dec 12 11:20:21 EST 2003
On 12/12/03 at 10:51, 'twas brillig and Ole Craig scrobe:
> Having just upgraded to clamav 0.65, I thought I'd setup clamd
> rather than clamav scanning from MIMEDefang, but I'm running into
> problems. It doesn't look like MD is actually talking to clamd; I
> don't see any log entries in the clamd log to indicate that anything's
> using it, and MD's not catching a zipped Mimail.F. (But it's not
> tempfailing either.)
Forgot to add:
When I run clamdscan manually on the extracted zipfile, it
correctly detects it:
clamdscan readnow.zip
/root/readnow.zip: Worm.Mimail.F FOUND
----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.005 sec (0 m 0 s)
Other possibly-pertinent details...
[root at loki root]# ls -lsd /var/spool/MIMEDefang/clamd.sock
0 srwxrwxrwx 1 clamav clamav 0 Dec 12 10:56 /var/spool/MIMEDefang/clamd.sock
[root at loki root]# ls -lsd /var/spool/MIMEDefang/
16 drwxrwx--- 9 defang defang 16384 Dec 12 11:19 /var/spool/MIMEDefang/
[root at loki root]# groups clamav
clamav : clamav defang
Ole
--
Ole Craig * UNIX, linux, SMTP-ninja; news, web; SGI martyr * CS Computing
Facility, UMass * <www.cs.umass.edu/~olc/pgppubkey.txt> for public key
[...] Oh, shed thy mercy and thy grace / On those who venture into space.
(R. A. Heinlein)
More information about the MIMEDefang
mailing list