Exiscan and clamav: can't get working on Debian sid

David Fisher <[email protected]> Sat, 22 Jan 2005 17:31:25 +1100
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
Hi, I hope this is the right place to be asking questions about 
setup/config issues.

I am attempting to get virus scanning working on a Debian unstable box.

Exim4-daemon-heavy 4.43-4 and clamav-daemon 0.80-7 are installed.

I am attempting to follow the instructions in Tim Jackson's Howto.  I 
have spam checking working using sa-exim and spamassassin after having 
tried and failed with exiscan-acl but that's another issue and I'll 
come back to that when I've sorted out clamav (maybe it's the same 
basic problem).

Exim4 has been configured with exim4-config to use small files.

The line 

 av_scanner = clamd:127.0.0.1 3310 

has been added to /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs 
at the end of the file? (Is this the correct file in main?)

The line

 acl_smtp_mime = acl_check_mime

Has been added to /etc/exim4/conf.d/main/02_exim4-config_options below 
the existing entries for acl_smpt_rcpt and acl_smpt_data at the 
beginning of the file.

the new file /etc/exim4/conf.d/acl/50_exim4-config_check_mime was 
created, containing:

 # 50_exim4-config_check_mime

 acl_check_mime:
        deny    message = This message conayins a virus or other harmful 
 content ($malware_name)
               malware = *

    # accept otherwise
    accept


the user clamav was added to the Debian-exim group:

sudo adduser clamav debin-exim

The clamd config /etc/clamav/clamd-conf was amended:

 # LocalSocket /var/run/clamav/clamd.ctl
 TCPSocket 3310
 TCPAddr 127.0.0.1

Clamd was restarted:

sudo /etc/init.d/clamav-daemon restart

and exim4 updated and restarted:

 sudo dpkg-reconfigure exim4-config.

I get the following error in /var/log/exim4/mainlog and rejectlog:

"temporarily rejected during MIME ACL checks: cannot test malware cond
ition in MIME ACL"

So I guess exiscan-acl is not succesful in calling clamav for whatever 
reason.

Sorry about the length but it's better than "It doesn't work, what's 
wrong".

Could a Debian guru on the list please advise what I might be doing 
wrong????

-- 
David

"If you can't control your peanut butter, 
you can't expect to control your life."

- Calvin