Marko Lerota <[EMAIL PROTECTED]> writes: > I have FreeBSD 6.0 with qsheff build from ports tree. > When I send virus for testing it passes them.
I found the problem, bug, typo or whatever you can call it in default qsheff.conf. It shoud be in qsheff.conf VIRUS_PROG = "/usr/local/bin/clamscan" and not VIRUS_PROG = "/usr/local/bin/clamdscan" > It reports SAFE but > <redcloud>[~]$ clamdscan eicar.com > /home/lero/eicar.com: Eicar-Test-Signature FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.000 sec (0 m 0 s) > > and here's the config > > WORKDIRPREFIX = /var/spool/qsheffq > TEMPDIRPREFIX = /var/tmp/qsheffq > LOGFILE = /var/log/qsheff.log > debug_level = 99 > > enable_blackhole = 0; > paronia_level = 2 > drop_empty_to = 0 > forbidden_header_lines = "" > enable_quarantine = 0 > enable_save_all = 0 > > # Enable White/Black List Control > enable_wblist = 0 > > # Enable subject filter > enable_subject_filter = 0 > # Enable/disable spam program > enable_body_filter = 0 > # > enable_attach_filter = 0 > > # Enable/disable virus program > enable_virus_prog = 1 > > # Enable/disable any filter program like Zabit > # qSheff can perform body scanning against spams. > # But it also provide to use custom programs you need. > # When you need, enable following variable and > # define FILTER_PROG_* variables. > enable_filter_prog = 0 > > MIME_PROG = "/usr/local/bin/ripmime -i mesg -e -d" > MIME_PROG_OK_RET = 0 > MIME_PROG_ERR_RET = -1 > > VIRUS_PROG = "/usr/local/bin/clamdscan" > VIRUS_PROG_OK_RET = 0 > VIRUS_PROG_VIRUS_RET = 1 > VIRUS_PROG_ERR_RET = 2 -- Marko Lerota --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
