Re: [Exim] any frustations with exim+amavis

Pàgina inicial
Delete this message
Reply to this message
Autor: Brunet Eric
Data:  
A: Rainer Link
CC: exim-users
Assumpte: Re: [Exim] any frustations with exim+amavis
Rainer Link wrote:
>> I assume that :
>> amavis work fine ('make check' is ok)
>> AvpDaemonClient works fine too (good return code (0) in dirs not
>> infected) and code 4 for infected file
>
>
> By default, the runtime directory of AMaViS is /var/amavis - please
>make
> sure, AvpDaemon "observs" this directory, too.


yes good notice, but kavdaemon don't want to scan /var/amavis,
howener i add this in defUnix.prf:
Names=*/home;*/tmp;*/var/tmp;/usr/src;/mnt/cdrom;/var/amavis
                                                  ~~~~~~~~~~~
it's wrong??


> Set log_level to 5 in /usr/sbin/amavis, so amavis does a very verbose
> logging. Depining how amavis is configured, amavis logs either via
> syslog or to /var/amavis/amavis.log

this is a exim log (debug_level=5) of a mail which is attached the
EICAR.COM file:

|delivering ericb@??? as ericb using amavis:
| uid=1039 gid=1031 home=NULL current=/var/spool/amavis
| auxiliary group list: <none>

|set_process_info: 16152 delivering 181VeS-0004CU-00 to ericb using |amavis
|amavis transport entered
|set_process_info: 16154 reading output from
|/usr/local/amavis/sbin/amavis -f <${sender_address}> -d |{pipe_addresses}
|Writing message to pipe
|amavis transport yielded 0
                   ~~~~~~~~~
why amavis don't detect eicar virus, it work with virus-msg test script!!!


moreover:
i tried the new version of AVP (4.0.2 intead of 3.0 build 136) and
AvpDaemonClient return strange error code:
#/opt/AVP/AvpDaemonClient /tmp
....
/tmp/EICAR.COM    infected: EICAR-Test-File
...


Return code: 20
Humm, it is not 4 instead???

i begin to think that exim+amavis+avp will not work a day :(

thank for your patience