From owner-freebsd-questions@FreeBSD.ORG Tue Mar 9 11:17:38 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A7F5016A4CE for ; Tue, 9 Mar 2004 11:17:38 -0800 (PST) Received: from lv.raad.tartu.ee (lv.raad.tartu.ee [194.126.106.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 70D9243D4C for ; Tue, 9 Mar 2004 11:17:37 -0800 (PST) (envelope-from toomas.aas@raad.tartu.ee) Received: Message by Barricade lv.raad.tartu.ee with ESMTP id i29JHZF0029425; Tue, 9 Mar 2004 21:17:35 +0200 Message-Id: <200403091917.i29JHZF0029425@lv.raad.tartu.ee> Received: from INFO/SpoolDir by raad.tartu.ee (Mercury 1.48); 9 Mar 04 21:17:35 +0200 Received: from SpoolDir by INFO (Mercury 1.48); 9 Mar 04 21:17:09 +0200 From: "Toomas Aas" Organization: Tartu City Government To: Robert Fitzpatrick Date: Tue, 9 Mar 2004 21:17:01 +0200 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Priority: normal In-reply-to: <1078850039.9307.25.camel@columbus> cc: questions@freebsd.org Subject: Re: Amavisd/ClamAV X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Mar 2004 19:17:38 -0000 Hi! > WARN: all primary virus scanners failed, considering backups > > I looked on the clamav web site and found this statement: > > clamscan is enabled automatically if clamscan binary is found at > amavisd-new starup time. clamd is activated by uncommenting its entry in > the @av_scanners list, file /etc/amavisd.conf. > > I see in my amavisd.conf file that the 'Clam Antivirus-clamd' entry > under @av_scanners is commented out, should it not be? You should uncomment it. As you do it, pay attention to the comments immediately following the clamd entry in amavisd.conf - they tell you how to get clamd and amavisd working together. In a nutshell, you need to make sure that filename of clamd socket is correct in amavisd.conf and that clamd runs as the same user who is running amavisd. Besides changing clamav.conf this involves some tinkering with file/directory permissions (of clamav files/directories), but this is all pretty simple. > clamscan is what amavisd is resorting to after the Warning, is this a > bad thing? They say that virus scanning via clamd is faster than via clamscan, but I haven't really done any measurements. -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * Windows NT - the world's only 80 MB solitaire game!