[Pkg-exim4-users] Easiest way to install antivirus and antispam on Exim 4.5 and debian

Jose de Jesus Gutierrez Ramirez jgtez@previtep.com.mx
Tue, 14 Jun 2005 12:18:09 -0500


Hi, After adding the suggested lines,

I receive the next messagge error...

2005-06-14 12:01:24 1DiEmy-00063f-7k malware acl condition: clamd: ClamAV
return
ed /var/spool/exim4/scan/1DiEmy-00063f-7k: Access denied. ERROR

I think it's a permissions problem, so I checked the priveleges of this
directory

#ls -l /var/spool/exim4/

drwxr-x---  2 Debian-exim Debian-exim 4096 2005-06-14 12:11 scan

the user runinng clamd is clamav

# ps -ef|grep clamd
clamav   10941     1  0 Jun10 ?        00:01:01 /usr/sbin/clamd
clamav   13480 10941  0 Jun11 ?        00:00:00 /usr/sbin/clamd

clamav is member of the Debian-exim group

I've changed the privileges of the /var/spool/exim4/scan directory to have
the group write permissions.

# chmod 770 /var/spool/exim4/scan

# ls -l /var/spool/exim4/

drwxrwx---  2 Debian-exim Debian-exim 4096 2005-06-14 12:15 scan


But the problem still happening. What can be wrong?

Aprecciate any suggestions.

TIA

Jesus Gutierrez


-----Mensaje original-----
De: pkg-exim4-users-admin@lists.alioth.debian.org
[mailto:pkg-exim4-users-admin@lists.alioth.debian.org]En nombre de
Andreas Barth
Enviado el: Viernes, 10 de Junio de 2005 01:45 p.m.
Para: Jose de Jesus Gutierrez Ramirez
CC: pkg-exim4-users@lists.alioth.debian.org
Asunto: Re: [Pkg-exim4-users] Easiest way to install antivirus and
antispam on Exim 4.5 and debian


* Jose de Jesus Gutierrez Ramirez (jgtez@previtep.com.mx) [050610 20:20]:
> I've just installed Exim 4.5 on debian, I'd like to know what it's the
> easiest way to install antivirus and antispam, and which packages are the
> most used.

exim4-daemon-heavy includes the exiscan extensions for filtering.

I use something like
   deny message   = This message contains malformed MIME ($demime_reason)
        demime    = *
        condition = ${if >{$demime_errorlevel}{2}{1}{0}}

   deny message   = This message contains an attachment of a type we don't
accept (.$found_extension)
        demime    = bat:com:pif:prf:scr:vbs

.ifdef MALWARE_SCANNING
   deny message   = This message contains a virus or other harmful content
($malware_name)
        demime    = *
        malware   = *
.endif

in my acl_check_data (together with an installed clamav and
av_scanner = clamd:/var/run/clamav/clamd.ctl
MALWARE_SCANNING =
in the main sections, and it works well. Spamassassin can be integrated
similar.


Cheers,
Andi

_______________________________________________
Pkg-exim4-users mailing list
Pkg-exim4-users@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users