Re: [exim] Using Kaspersky 8.0.1 with Exim 4.89

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-users
Subject: Re: [exim] Using Kaspersky 8.0.1 with Exim 4.89
Luca Bertoncello <lucabert@???> (Fr 25 Aug 2017 10:34:47 CEST):
> Hi list!
>
> I'm using Exim 4.89 (installed from Debian-Repositories) and I need to check
> incoming E-Mails with Kaspersky 8.0.1.
>
> I configured Exim so:
>
> av_scanner = aveserver:/run/klms/rds_av
>
> ...
>
>   deny  message          = 552 PDV04 - This message contains malware
> ($malware_name)
>         malware          = *

>
> very similar to other Servers with ClamAV...
>
> Well, it does NOT work...
> If I try to send an E-Mail (with or without virus!) it hangs on the check.
> exim -bh say that:
>
> > > > warn: condition test succeeded in ACL "acl_check_data"
> > > > processing "deny"
> > > > message: 552 PDV04 - This message contains malware ($malware_name).
> > > > check malware = *
>
> No error in the Log of Kaspersky...
>
> Has someone an idea what I'm doing wrong?


Who owns /run/klms/rds_av? What are the permissions?

Is there some process listed if you use `fuser -v /run/klms/rds_av`

What happens if you stop the Kaspersky daemon?

What do you get using `exim -d+acl -bh …`

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- 
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -