It works !
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com [Plugin] calling plugin
ASSP_AFC
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com ClamAV: scanned 283
bytes in message - OK
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com FileScan: scanned 283
bytes in message
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com ClamAV: scanned 32015
bytes in message - FOUND winnow.spam.ts.miscspam.818179.UNOFFICIAL
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com deleting spamming
safelisted tuplet: (**tuplet***) age: 2s
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com Message-Score: added 50
(vdValencePB) for virus detected:
'winnow.spam.ts.miscspam.818179.UNOFFICIAL', total score for this message
is now 76
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com PB-IP-Score for
'1.1.1.1' is 81, added 50 for
virus-ClamAV:winnow.spam.ts.miscspam.818179.UNOFFICIAL
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] [VIRUS] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com 554 5.7.1 Mail appears
infected with \[winnow.spam.ts.miscspam.818179.UNOFFICIAL\] -- disinfect
and resend. - replaced virus-mail-part with simple text
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] [VIRUS] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com info: sending modified
message
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] [VIRUS] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com [spam found] 554 5.7.1
Mail appears infected with \[winnow.spam.ts.miscspam.818179.UNOFFICIAL\]
-- disinfect and resend. [Plus500 | EUR/NOK steht bei 7,9297]
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] [VIRUS] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com [Plugin] calling plugin
ASSP_Razor
Jun-21-13 01:50:42 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com razor message [check]:
Razor-Agents v2.84 starting razor-check
Jun-21-13 01:50:44 M1-72239-04129 [Worker_1] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com razor message [check]:
mail 1 is not known spam.
Jun-21-13 01:50:44 M1-72239-04129 [Worker_1] [VIRUS] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com [Plugin] calling plugin
ASSP_DCC
Jun-21-13 01:50:44 [Worker_1] Info: created agent to dccifd
Jun-21-13 01:50:44 [Worker_1] Info: connected to dccifd at
10.69.5.95:11111
Jun-21-13 01:50:49 [Worker_1] Info: got result: Accept - for recipients:
u...@localdomain.com Accept - from DCC - reported HAM
Jun-21-13 01:50:49 M1-72239-04129 [Worker_1] [MessageLimit] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com info: logfile
C:/assp/notspam/Plus500_EUR_NOK_steht_bei_7,9297--98364.eml removed
Jun-21-13 01:50:49 M1-72239-04129 [Worker_1] [MessageLimit] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com mail blocked by Plugin
all - reason MessageScore 76, limit 50
Jun-21-13 01:50:49 M1-72239-04129 [Worker_1] [MessageLimit] 1.1.1.1
<sen...@senderdomain.com> to: u...@localdomain.com [spam found]
(MessageScore 76, limit 50) [Plus500 | EUR/NOK steht bei 7,9297] ->
C:/assp/spam/Plus500_EUR_NOK_steht_bei_7,9297--98364.eml;
Thomas
Von: "Robert K Coffman Jr. -Info From Data Corp."
<bcoff...@infofromdata.com>
An: For Users of ASSP <assp-user@lists.sourceforge.net>,
Datum: 21.06.2013 23:07
Betreff: Re: [Assp-user] Plugin ASSP_AFC.pm ( ASSP-Plugin for full
Attachment detection and ClamAV-scan) is installed? Turned On? Re: ClamAV
> I have clamav working under Ubuntu 12.04. My settings are:
I built a brand new 13.04 specifically to implement Clam on, although I
upgraded to ASSP version 2.3.3(13160) while I was at it.
> Use ClamAV (UseAvClamd) is checked
>
> Port or file socket for ClamAV (AvClamdPort)
> /var/run/clamav/clamd.ctl
>
> ClamAV Bytes (ClamAVBytes)
> 100000
>
> ClamAV Timeout (ClamAVtimeout)
> 10
>
> My ASSP Logs show:
>
> ClamAV: scanned 13421 bytes in local message - OK
These are precisely what I have set. Does ASSP log successful scans for
non-viral messages? I'm not seeing any similar messages.
- Bob
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
