The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

clamav not logging properly

Discussion in 'General Discussion' started by aleister, Mar 1, 2005.

  1. aleister

    aleister Registered

    Joined:
    Mar 1, 2005
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Today I installed ClamAV for the first time using the Exiscan+Clam+Exim-Installer.

    After that was up, I used the update script, and then freshclam. Everything seems to be working fine - it blocks what it needs to - I see the extra header in the email. There is just one problem:

    When it stops a message (due to a virus) it does not mention it in clamd.log.

    But if I go into my config, and set it to log all messages (the good ones too), the good messages are logged, but the 'bad' ones still are not. It seems like my config would have to be right as far as the log goes, but I have ran out of ideas.

    Any thoughts? Thanks!

    Not to mention, when I send an Eicar test to my account (on the server I am using this on), shouldn't I be getting back a message ? I thought it send one back to the sender..
     
    #1 aleister, Mar 1, 2005
    Last edited: Mar 1, 2005
  2. aleister

    aleister Registered

    Joined:
    Mar 1, 2005
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Well.. as an update,

    I discovered that for whatever reason, the mail account I was sending the Eicar test message with did not cause an entry to be made in the log, but it did keep the message from being sent. Strangely enough, it did not sent an email back to the account saying it failed.

    So I tried sending from another account, and sure enough, it appeared in the log file. I also received a message back from my mailserver, but it did not look like it was supposed to, it simply said :

    Delivery to the following recipient failed permanently:

    (**the email I sent it to**)

    Technical details of permanent failure:
    PERM_FAILURE: SMTP Error (state 13): 550 (Eicar-Test-Signature)​

    Is this strange to anyone else? :)
     
Loading...

Share This Page