Hi,
The latest qsheff revision in 1 series is r5. If you want to use 1.0
series, use the following link.
http://www.enderunix.org/qsheff/old_versions/qsheff-1.0-r5.tar.gz
And if you try 2.1-r1 we can help to find the problem.
Lets get to the point:
At first can you check the clamd.log? Does ClamAv runs?
If yes, compile qSheff with debug option. (--enable-debug)
Then run qSheff at the command prompt:
# ./configure --enable-debug
# ./qsheff < share/sample-VIRUS.msg
and result?
regards,
Baris Simsek
http://www.enderunix.org/simsek/
Yayinevi: http://www.acikakademi.com
endersys: http://www.endersys.com
Thiago Alves Siqueira wrote:
Hi all!
I compiled Qsheff from ports on a FreeBSD 6.1-Release. This is the
version 1.0-r4 of qsheff.
Everything is ok, but when I send a test virus that comes with clamav
source, it is passing and qsheff don't say anything in his logs.
Like I saw in the list, I configured Clamd to run as root and the
problem continues.
My configurations:
WORKDIRPREFIX = /work/qsheffq
TEMPDIRPREFIX = /work/qsheffq/tmp
LOGFILE = /work/qsheffq/qsheff.log
debug_level = 14
enable_blackhole = 0;
paronia_level = 0
drop_empty_to = 1
forbidden_header_lines = ""
enable_quarantine = 0
enable_save_all = 0
enable_wblist = 0
enable_subject_filter = 0
enable_body_filter = 0
enable_attach_filter = 1
enable_virus_prog = 1
enable_filter_prog = 0
MIME_PROG = "/usr/local/bin/ripmime --disable-qmail-bounce --no-ole -i
mesg -e -d"
MIME_PROG_OK_RET = 0
MIME_PROG_ERR_RET = -1
VIRUS_PROG = "/usr/local/bin/clamdscan"
VIRUS_PROG_OK_RET = 0
VIRUS_PROG_VIRUS_RET = 1
VIRUS_PROG_ERR_RET = 2
QUEUE_PROG = /var/qmail/bin/qmail-queue
The permissions of /work/qsheffq:
-rw-r--r-- 1 root wheel 4195 Jul 4 16:07 qsheff.log
drwxr-xr-x 2 root wheel 512 Jul 4 16:19 tmp
Clamd socket is at /tmp/clamd
What I am missing?
i tried to compile and install the last version (qshef-II-2.1), but
always my qmail say that the mails were temporarily rejected. So, if
this version 1.0 works, I am happy!
Any hints? Thaks for all!
Thiago
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
