I have finally had a chance to do some more checking on my setup.
I have switched to running clamd (but it makes no difference). It
is running as user "smtpd".
I think I have traced the problem to the temp file not containing
the message body(!). But I do not know why that would be - the headers are
all there. Here's the code from the plugin I'm using:
my ($temp_fh, $filename) = tempfile();
chmod 0666, $filename ; # to ensure access by scanner
print $temp_fh "Received: ...\n" ; # per "SPF" posts
print $temp_fh $transaction->header->as_string;
print $temp_fh "\n";
while (my $line = $transaction->body_getline) {
print $temp_fh $line;
}
seek($temp_fh, 0, 0);
I there something missing? I'm sure it was catching stuff before
(running clamscan instead of clamdscan).
--
Roger Walker
"HIS Pain - OUR Gain"