[Pkg-clamav-devel] Bug#520353: clamav-milter ignores whitelist file
Kevin Fernandez
kevin at findhost.org
Wed Mar 18 22:36:03 UTC 2009
Package: clamav-milter
Version: 0.94.dfsg.2-1
Severity: normal
clamav-milter ignores my whitelist file. Here's my
/etc/default/clamav-milter file:
# Default options: 2 children max and scan outgoing and local messages
OPTIONS=" --whitelist-file=/etc/clamav/whitelist.txt --max-children=2
-ol "
#
# If you want to set an alternate pidfile (why?) please do it here:
#
#PIDFILE=/var/run/clamav/clamav-milter.pid
#
# If you want to set an alternate socket, do so here (remember to
change
# sendmail.mc for sendmail and main.cf for postfix):
#
#SOCKET=local:/var/run/clamav/clamav-milter.ctl
#
# For postfix, you might want these settings:
#
USE_POSTFIX='yes'
SOCKET=local:/var/spool/postfix/clamav/clamav-milter.ctl
#
# If you have troubles because of locale, uncomment the following line
#
#unset LANG
#
# If you use --external, you might want to set this to make sure
# clamav-milter is started after clamd
#RESTART_AFTER_CLAMD=yes
ls -la /etc/clamav/whitelist.txt
-rw-r--r-- 1 root root 325 mar 18 18:42 /etc/clamav/whitelist.txt
head -n 2 /etc/clamav/whitelist.txt
<xxxxxxx-xx at xxxxxxxx.org>
<xxxxxx at xxxxxxxxx.org>
I'm using postfix as MTA, with these options:
milter_default_action = accept
smtpd_milters = unix:/var/spool/postfix/clamav/clamav-milter.ctl
If i make a typo in /etc/default/clamav-milter about the whitelist
path, there's an error when i start clamav-milter, saying it can't
find the whitelist file, so it means it finds it..
ps aux | grep clamav-milter
clamav 31873 0.0 11.8 168924 121164 ? Ssl 20:08 0:02
/usr/sbin/clamav-milter --whitelist-file=/etc/clamav/whitelist.txt
--max-children=2 -ol --pidfile /var/run/clamav/clamav-milter.pid
local:/var/spool/postfix/clamav/clamav-milter.ctl
clamav-milter indeed works, it scans the emails (as it adds the header
to the mails), but it scans all the emails, ignoring my whitelist.
postconf mail_version
mail_version = 2.5.5
Wed Mar 18 23:34:08 2009 -> ClamAV-milter started at Wed Mar 18
23:34:08 2009
Wed Mar 18 23:34:08 2009 -> Starting ClamAV version 0.94.2,
clamav-milter version 0.94.2
-- Package-specific info:
--- configuration ---
/etc/clamav/clamd.conf: clamd directives
------------------------------
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock = no
LogFileMaxSize = 0
LogTime = yes
LogClean = no
LogVerbose = no
LogSyslog = no
LogFacility = "LOG_LOCAL6"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory = "/tmp"
ScanPE = yes
ScanELF = yes
DetectBrokenExecutables = no
ScanMail = yes
MailFollowURLs = no
ScanPartialMessages = no
PhishingSignatures = yes
PhishingScanURLs = yes
PhishingAlwaysBlockCloak = no
PhishingAlwaysBlockSSLMismatch = no
HeuristicScanPrecedence = no
DetectPUA = no
ExcludePUA not set
IncludePUA not set
StructuredDataDetection = no
StructuredMinCreditCardCount = 3
StructuredMinSSNCount = 3
StructuredSSNFormatNormal = yes
StructuredSSNFormatStripped = no
AlgorithmicDetection = yes
ScanHTML = yes
ScanOLE2 = yes
ScanPDF = yes
ScanArchive = yes
MaxScanSize = 104857600
MaxFileSize = 26214400
MaxRecursion = 16
MaxFiles = 10000
ArchiveLimitMemoryUsage = no
ArchiveBlockEncrypted = no
DatabaseDirectory = "/var/lib/clamav"
TCPAddr not set
TCPSocket not set
LocalSocket = "/var/run/clamav/clamd.ctl"
MaxConnectionQueueLength = 15
StreamMaxLength = 10485760
StreamMinPort = 1024
StreamMaxPort = 2048
MaxThreads = 12
ReadTimeout = 180
IdleTimeout = 30
MaxDirectoryRecursion = 15
ExcludePath not set
FollowDirectorySymlinks = no
FollowFileSymlinks = no
ExitOnOOM = no
Foreground = no
Debug = no
LeaveTemporaryFiles = no
FixStaleSocket = yes
User = "clamav"
AllowSupplementaryGroups = yes
SelfCheck = 3600
VirusEvent not set
ClamukoScanOnAccess not set
ClamukoScanOnOpen not set
ClamukoScanOnClose not set
ClamukoScanOnExec not set
ClamukoIncludePath not set
ClamukoExcludePath not set
ClamukoMaxFileSize = 5242880
DevACOnly not set
DevACDepth not set
*** MailMaxRecursion is DEPRECATED ***
*** ArchiveMaxFileSize is DEPRECATED ***
*** ArchiveMaxRecursion is DEPRECATED ***
*** ArchiveMaxFiles is DEPRECATED ***
*** ArchiveMaxCompressionRatio is DEPRECATED ***
*** ArchiveBlockMax is DEPRECATED ***
/etc/clamav/freshclam.conf: freshclam directives
------------------------------
LogFileMaxSize = 0
LogTime = no
LogVerbose = no
LogSyslog = no
LogFacility = "LOG_LOCAL6"
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav/"
Foreground = no
Debug = no
AllowSupplementaryGroups = no
DatabaseOwner = "clamav"
Checks = 24
UpdateLogFile = "/var/log/clamav/freshclam.log"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net"
DatabaseMirror = "database.clamav.net"
MaxAttempts = 5
ScriptedUpdates = yes
CompressLocalDatabase = no
HTTPProxyServer not set
HTTPProxyPort not set
HTTPProxyUsername not set
HTTPProxyPassword not set
HTTPUserAgent not set
NotifyClamd not set
OnUpdateExecute not set
OnErrorExecute not set
OnOutdatedExecute not set
LocalIPAddress not set
ConnectTimeout = 30
ReceiveTimeout = 30
SubmitDetectionStats not set
DetectionStatsCountry not set
Engine and signature databases
------------------------------
Engine version: 0.94.2
Database directory: /var/lib/clamav/
main db: Format: .cld, Version: 50, Build time: Sun Feb 15 22:47:25 2009
daily db: Format: .cld, Version: 9132, Build time: Wed Mar 18 21:46:20 2009
--- data dir ---
total 45096
-rw-r--r-- 1 clamav clamav 1719296 mar 18 22:45 daily.cld
drwxr-xr-x 2 clamav clamav 4096 jun 1 2008 daily.inc
-rw-r--r-- 1 clamav clamav 44391424 f?15 23:25 main.cld
drwxr-xr-x 2 clamav clamav 4096 jun 1 2008 main.inc
-rw------- 1 clamav clamav 364 mar 18 22:45 mirrors.dat
-- System Information:
Debian Release: 5.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.27.10-grsec-final (SMP w/2 CPU cores)
Locale: LANG=fr_FR, LC_CTYPE=fr_FR (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages clamav-milter depends on:
ii clamav-base 0.94.dfsg.2-1 anti-virus utility for Unix - base
ii clamav-freshclam [clam 0.94.dfsg.2-1 anti-virus utility for Unix - viru
ii libbz2-1.0 1.0.5-1 high-quality block-sorting file co
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libclamav5 0.94.dfsg.2-1 anti-virus utility for Unix - libr
ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library
ii libmilter1.0.1 8.14.3-5 Sendmail Mail Filter API (Milter)
ii libwrap0 7.6.q-16 Wietse Venema's TCP wrappers libra
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
Versions of packages clamav-milter recommends:
ii clamav-daemon 0.94.dfsg.2-1 anti-virus utility for Unix - scan
Versions of packages clamav-milter suggests:
pn clamav-docs <none> (no description available)
pn daemon <none> (no description available)
-- no debconf information
More information about the Pkg-clamav-devel
mailing list