Exiscan and clamav: can't get working on Debian sid
David Fisher <[email protected]> Sat, 22 Jan 2005 17:31:25 +1100
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, I hope this is the right place to be asking questions about
setup/config issues.
I am attempting to get virus scanning working on a Debian unstable box.
Exim4-daemon-heavy 4.43-4 and clamav-daemon 0.80-7 are installed.
I am attempting to follow the instructions in Tim Jackson's Howto. I
have spam checking working using sa-exim and spamassassin after having
tried and failed with exiscan-acl but that's another issue and I'll
come back to that when I've sorted out clamav (maybe it's the same
basic problem).
Exim4 has been configured with exim4-config to use small files.
The line
av_scanner = clamd:127.0.0.1 3310
has been added to /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs
at the end of the file? (Is this the correct file in main?)
The line
acl_smtp_mime = acl_check_mime
Has been added to /etc/exim4/conf.d/main/02_exim4-config_options below
the existing entries for acl_smpt_rcpt and acl_smpt_data at the
beginning of the file.
the new file /etc/exim4/conf.d/acl/50_exim4-config_check_mime was
created, containing:
# 50_exim4-config_check_mime
acl_check_mime:
deny message = This message conayins a virus or other harmful
content ($malware_name)
malware = *
# accept otherwise
accept
the user clamav was added to the Debian-exim group:
sudo adduser clamav debin-exim
The clamd config /etc/clamav/clamd-conf was amended:
# LocalSocket /var/run/clamav/clamd.ctl
TCPSocket 3310
TCPAddr 127.0.0.1
Clamd was restarted:
sudo /etc/init.d/clamav-daemon restart
and exim4 updated and restarted:
sudo dpkg-reconfigure exim4-config.
I get the following error in /var/log/exim4/mainlog and rejectlog:
"temporarily rejected during MIME ACL checks: cannot test malware cond
ition in MIME ACL"
So I guess exiscan-acl is not succesful in calling clamav for whatever
reason.
Sorry about the length but it's better than "It doesn't work, what's
wrong".
Could a Debian guru on the list please advise what I might be doing
wrong????
--
David
"If you can't control your peanut butter,
you can't expect to control your life."
- Calvin