What does this mean? Not running, or not magically integrated with your
MTA? ps -u clamav will tell you what processes are running as user
clamav. If clamd and freshclam are not listed in the output, I will be
very surprised.
sorry for my bad english. So Clamd and freshclam is runnning as user clamav.
Again, not sure what you mean here - exim is rejecting a message with
eicar, and yet delivering it anyway? That makes no sense.
yes, he delivered it in my mailbox.
but i cant understand why?
This is in the reject.log of exim4:
2005-11-28 08:35:33 H=(XXX.XXX.XXX.XXX) [219.133.174.71] rejected EHLO or
HELO 80.XXX.145.XXX: "Dropped spammer pretending to be us"
2005-11-28 12:49:57 1EghW9-0001Kd-Mb H=mail.fluns.com (www.declude.com)
[63.246.13.85] F=<[EMAIL PROTECTED]> rejected after DATA: This
message contains an unwanted file extension (com)
Envelope-from: <[EMAIL PROTECTED]>
Envelope-to: <[EMAIL PROTECTED]>
P Received: from mail.fluns.com ([63.246.13.85] helo=www.declude.com)
by dXXX-XXX-XXX-XXX.dds.hosteurope.de with smtp (Exim 4.50)
id 1EghW9-0001Kd-Mb
for [EMAIL PROTECTED]; Mon, 28 Nov 2005 12:49:57 +0100
X-Web-Originating-IP: 193.28.100.68
I Message-Id: <[EMAIL PROTECTED]>
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Thu, 02 Nov 2000 20:23:17 -0500
F From: "WebMaster" <[EMAIL PROTECTED]>
T To: "User" <[EMAIL PROTECTED]>
Subject: Test eicar.com file [eicarplain]
Mime-Version: 1.0
Content-Type: multipart/mixed;
BounDary="=====================_307115168==_"
But in my (/etc/exim4/vexim-acl-check-content.conf i have this part:
# Reject virus infested messages.
warn message = This message contains malware ($malware_name)
malware = *
log_message = This message contains malware ($malware_name)
So he dont warn me :-(
any idea?
marcus
_________________________________________________________________
Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit
Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu!
http://desktop.msn.de/ Jetzt gratis downloaden!
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
