> > > -- > > > > I'm tempted to take the same route, except for the fact > that I noticed > > the filter time has gone up dramatically: > > Scott - > The problem I had seemed to be that MD wasn't actually > talking to clamd. (Do you catch the EICAR text file with > clamd enabled?) It would make sense that MD processed > significantly faster if it's not incurring the virusscan > overhead at all. Maybe we could have someone with a working > MD<->clamd setup try your speed test and report the > difference in MD time between clamav and clamd... > > > Ole > --
Thanks for the replies everyone. I was thinking they weren't talking also, that is why I did a bunch of tests before I decided to post. I'm fairly confident that it was working, as most of the scans from the test viruses got caught. Below is the log for the test virus with a .zip file attachment. So I'm pretty sure that clamd was catching at least the test viruses. And I don't know if it is luck, or clamd just hasn't been working, but the only other virus that shows up on the logs (from months ago) was W32/[EMAIL PROTECTED] Jan 27 09:06:26 linux1 sm-mta[6009]: i0RH6PVm006009: from=<[EMAIL PROTECTED]>, size=1615, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=12.5.18.175.excedent.us [12.5.18.175] (may be forged) Jan 27 09:06:26 linux1 mimedefang.pl[5980]: MDLOG,i0RH6PVm006009,virus,Eicar-Test-Signature,12.5.18.175,<[EMAIL PROTECTED] s.org>,<[EMAIL PROTECTED]>,Virus Scanner Test Jan 27 09:06:26 linux1 mimedefang.pl[5980]: MDLOG,i0RH6PVm006009,mail_in,,12.5.18.175,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED] hys.com>,Virus Scanner Test Jan 27 09:06:26 linux1 mimedefang.pl[5980]: filter: i0RH6PVm006009: append_text_boilerplate=1 discard=1 quarantine=1 Jan 27 09:06:26 linux1 mimedefang[6010]: i0RH6PVm006009: Discarding because filter instructed us to Jan 27 09:06:26 linux1 sm-mta[6009]: i0RH6PVm006009: Milter: data, discard Jan 27 09:06:26 linux1 sm-mta[6009]: i0RH6PVm006009: discarded _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
