[Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread metamorph

Problem with ClamAV plugin for spamassassin:

Spamassassin/Clamav/Ubuntu/PHP5/Apache2/citadel/ 

I just installed spamassasin and tested it with gtube and it worked, but
when I tried to install clamav it still lets the EICAR files through.  I
read through old posts and everything on the spamassassin site and still
cannot get it to work. 

Used spamassassin -D --lint to see if clamav plugin was loading:
 
[6680] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:
Can't locate /etc/spamassassin/clamav.pm in @INC (@INC contains:
/usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.8
/usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/lib/perl/5.8
/usr/share/perl/5.8 /usr/local/lib/site_perl) at
/usr/share/perl5/Mail/SpamAssassin/PluginHandler.pm line 107. 

PluginHandler.pm line 107: 
dbg("plugin: loading $package from $path"); 
# use require instead of "do", so we get built-in $INC{filename} 
# smarts 
$ret = eval { require $path; }; 
  } 

I guess the plugin is not getting loaded.  
Any suggestions on how to make it connect together are greatly appreciated. 

Installation steps I took: 
installed clamav and tested it with clamscan 
filescanclamav (pearl) installed with CPAN 
Then, I created the files clamav.cf and clamav.pm with the text from
http://wiki.apache.org/spamassassin/ClamAVPlugin. 
Placed the two files in the /etc/spamassassin directory. 
Made the recommended change to clamav.pm: our $CLAMD_SOCK =
"/var/run/clamav/clamd.ctdl";   # changed 
Restarted spamassassin. grep shows spamassassin. 
Sent EICAR  AV text test and it still doesn't do anything, ie the mail
message is still delivered as normal 

I really appreciate any help or suggestions.  

-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18113891.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread kwijibo
metamorph wrote:
> Problem with ClamAV plugin for spamassassin:
> 
> Spamassassin/Clamav/Ubuntu/PHP5/Apache2/citadel/ 
> 
> I just installed spamassasin and tested it with gtube and it worked, but
> when I tried to install clamav it still lets the EICAR files through.  I
> read through old posts and everything on the spamassassin site and still
> cannot get it to work. 
> 
> Used spamassassin -D --lint to see if clamav plugin was loading:
>  
> [6680] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:
> Can't locate /etc/spamassassin/clamav.pm in @INC (@INC contains:
> /usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.8
> /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/lib/perl/5.8
> /usr/share/perl/5.8 /usr/local/lib/site_perl) at
> /usr/share/perl5/Mail/SpamAssassin/PluginHandler.pm line 107. 

I think you either need to add clamav.pm to your @INC or you need to
put clamav.pm in some directory Perl already looks.

Steven
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread metamorph


kwijibo wrote:
> 
> metamorph wrote:
>> Problem with ClamAV plugin for spamassassin:
>> 
>> Spamassassin/Clamav/Ubuntu/PHP5/Apache2/citadel/ 
>> 
>> I just installed spamassasin and tested it with gtube and it worked, but
>> when I tried to install clamav it still lets the EICAR files through.  I
>> read through old posts and everything on the spamassassin site and still
>> cannot get it to work. 
>> 
>> Used spamassassin -D --lint to see if clamav plugin was loading:
>>  
>> [6680] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:
>> Can't locate /etc/spamassassin/clamav.pm in @INC (@INC contains:
>> /usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.8
>> /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/lib/perl/5.8
>> /usr/share/perl/5.8 /usr/local/lib/site_perl) at
>> /usr/share/perl5/Mail/SpamAssassin/PluginHandler.pm line 107. 
> 
> 

I think you either need to add clamav.pm to your @INC or you need to
put clamav.pm in some directory Perl already looks.

Steve 

I am very new to perl, how would you suggest I add clamav.pm to @INC (ln
-s?)?

Thanks for your reply
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18115885.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread kwijibo
metamorph wrote:

> I am very new to perl, how would you suggest I add clamav.pm to @INC (ln
> -s?)?
> 

Google "perl @INC".  There is quite a bit of info out there on how to do it.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread metamorph



kwijibo wrote:
> 
> metamorph wrote:
> 
>> I am very new to perl, how would you suggest I add clamav.pm to @INC (ln
>> -s?)?
>> 
> 
> Google "perl @INC".  There is quite a bit of info out there on how to do
> it.
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 
> 

Thanks,
I googled [EMAIL PROTECTED] and tried the following:

1.) ln -s etc/spamassasson/clamav.pm /usr/share/perl5/Debconf/ConfModule.pm
2.)  copying the files into /usr/share/perl5 folder and setting the
permissions
3.) none of the perl commands worked from the terminal or CPAN command
line-- I am showing my ignorance but this is where I am.

All the above failed to start clamav and I still get the error below:
[6290] dbg: config: fixed relative path: /etc/spamassassin/clamav.pm
[6290] dbg: plugin: loading ClamAV from /etc/spamassassin/clamav.pm
[6290] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:
Can't locate /etc/spamassassin/clamav.pm in @INC (@INC contains:
/usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.8
/usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/lib/perl/5.8
/usr/share/perl/5.8 /usr/local/lib/site_perl) at
/usr/share/perl5/Mail/SpamAssassin/PluginHandler.pm line 107.

Any suggestions are greatly appreciated and I will keep reading on the perl
basics.
-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18120673.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread Stephen Gran
On Wed, Jun 25, 2008 at 01:03:14PM -0700, metamorph said:
> I googled [EMAIL PROTECTED] and tried the following:
> 
> 1.) ln -s etc/spamassasson/clamav.pm /usr/share/perl5/Debconf/ConfModule.pm

Ouch.

> 2.)  copying the files into /usr/share/perl5 folder and setting the
> permissions
> 3.) none of the perl commands worked from the terminal or CPAN command
> line-- I am showing my ignorance but this is where I am.
> 
> All the above failed to start clamav and I still get the error below:
> [6290] dbg: config: fixed relative path: /etc/spamassassin/clamav.pm
> [6290] dbg: plugin: loading ClamAV from /etc/spamassassin/clamav.pm
> [6290] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:

I think the @INC thing might be a red herring.  Assuming you actually
have an /etc/spamassassin/clamav.pm (note the leading /), it is failing
to parse.  There are literally dozens of reasons for why this could be,
so I'm just going to ask a different question: why are you calling the
faster malware detecter from the slower spam detecter?  I call clamav
directly, before things go to spamassassin precisely to reduce the load
on my mail servers.
-- 
 --
|  Stephen Gran  | Small is beautiful.   -- Schumacher's   |
|  [EMAIL PROTECTED] | Dictum  |
|  http://www.lobefin.net/~steve | |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-25 Thread metamorph

> I googled [EMAIL PROTECTED] and tried the following:
> 
> 1.) ln -s etc/spamassasson/clamav.pm
> /usr/share/perl5/Debconf/ConfModule.pm

>Ouch.

I take it I screwed up pretty bad?  Could you explain (is it the missing
leading /) and is there a way to correct this?

> 2.)  copying the files into /usr/share/perl5 folder and setting the
> permissions
> 3.) none of the perl commands worked from the terminal or CPAN command
> line-- I am showing my ignorance but this is where I am.
> 
> All the above failed to start clamav and I still get the error below:
> [6290] dbg: config: fixed relative path: /etc/spamassassin/clamav.pm
> [6290] dbg: plugin: loading ClamAV from /etc/spamassassin/clamav.pm
> [6290] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:

>I think the @INC thing might be a red herring.  Assuming you actually
>have an /etc/spamassassin/clamav.pm (note the leading /), it is failing
>to parse.  There are literally dozens of reasons for why this could be,
>so I'm just going to ask a different question: why are you calling the
>faster malware detecter from the slower spam detecter?  I call clamav
>directly, before things go to spamassassin precisely to reduce the load
>on my mail servers.

It was suggested on the citadel.org manual as the most common method of
installing antivirus for use with citadel.  Your suggestion seems better
than any other I have been given so far.  Could you explain how to pipe
emails through clamav before spamassassin gets it?

I really appreciate your help and guidance.
-- 
 --
|  Stephen Gran  | Small is beautiful.   -- Schumacher's   |
|  [EMAIL PROTECTED] | Dictum  |
|  http://www.lobefin.net/~steve | |
 --


 
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18124967.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread Stephen Gran
On Wed, Jun 25, 2008 at 06:26:54PM -0700, metamorph said:
> 
> > I googled [EMAIL PROTECTED] and tried the following:
> > 
> > 1.) ln -s etc/spamassasson/clamav.pm
> > /usr/share/perl5/Debconf/ConfModule.pm
> 
> >Ouch.
> 
> I take it I screwed up pretty bad?  Could you explain (is it the missing
> leading /) and is there a way to correct this?

/usr/share/perl5/Debconf/ConfModule.pm is a perl module for debconf,
the Debian configuration system.  It's not clear to me why you picked on
that particular module, but that won't work, even if it was a good idea.
perl looks for a module based on it's name, so when you say 'use clamav'
it looks around the file system in it's search path (@INC) for a file
named clamav.pm and attempts to load it.

> > 2.)  copying the files into /usr/share/perl5 folder and setting the
> > permissions
> > 3.) none of the perl commands worked from the terminal or CPAN command
> > line-- I am showing my ignorance but this is where I am.
> > 
> > All the above failed to start clamav and I still get the error below:
> > [6290] dbg: config: fixed relative path: /etc/spamassassin/clamav.pm
> > [6290] dbg: plugin: loading ClamAV from /etc/spamassassin/clamav.pm
> > [6290] warn: plugin: failed to parse plugin /etc/spamassassin/clamav.pm:
> 
> >I think the @INC thing might be a red herring.  Assuming you actually
> >have an /etc/spamassassin/clamav.pm (note the leading /), it is failing
> >to parse.  There are literally dozens of reasons for why this could be,
> >so I'm just going to ask a different question: why are you calling the
> >faster malware detecter from the slower spam detecter?  I call clamav
> >directly, before things go to spamassassin precisely to reduce the load
> >on my mail servers.
> 
> It was suggested on the citadel.org manual as the most common method of
> installing antivirus for use with citadel.  Your suggestion seems better
> than any other I have been given so far.  Could you explain how to pipe
> emails through clamav before spamassassin gets it?

I have no idea how citadel works, sorry.
-- 
 --
|  Stephen Gran  | A door is what a dog is perpetually on  |
|  [EMAIL PROTECTED] | the wrong side of.   -- Ogden Nash  |
|  http://www.lobefin.net/~steve | |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread metamorph

>/usr/share/perl5/Debconf/ConfModule.pm is a perl module for debconf,
>the Debian configuration system.  It's not clear to me why you picked on
>that particular module, but that won't work, even if it was a good idea.
>perl looks for a module based on it's name, so when you say 'use clamav'
>it looks around the file system in it's search path (@INC) for a file
>named clamav.pm and attempts to load it.

Got it now.

>I have no idea how citadel works, sorry.

Ok, fair enough, but could you let me know what I am doing wrong when I try
to set clamd to run on a specific TCP port-I think I can make it work after
I have a specific/constant address to call?

I tried adding this to the clamd.conf file in etc/clamav:
1. TCPSocket 3310
2. Restarted clamd:  clamd restart

3. ps ax | grep [c]lamd
 5514 ?Ss 0:02 /usr/sbin/clamd
 8331 ?Ss 0:05 clamd restart

4. netstat -lpn:
unix  2  [ ACC ] STREAM LISTENING 143695514/clamd 
/var/run/clamav/clamd.ctl

Thanks for your reply.
Any suggestions are greatly appreciated.

full clamd.conf
# TCP port address.
# Default: disabled
TCPSocket 3310

#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
#LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket true
User clamav
AllowSupplementaryGroups false
ScanMail true
ScanArchive true
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ArchiveLimitMemoryUsage false
ArchiveBlockEncrypted false
MaxDirectoryRecursion 15
FollowDirectorySymlinks false
FollowFileSymlinks false
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
StreamMaxLength 10M
LogSyslog false
LogFacility LOG_LOCAL6
LogClean false
LogVerbose false
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
TemporaryDirectory /tmp
SelfCheck 3600
Foreground false
Debug false
ScanPE true
ScanOLE2 true
ScanHTML true
DetectBrokenExecutables false
MailFollowURLs false
ArchiveBlockMax false
ExitOnOOM false
LeaveTemporaryFiles false
AlgorithmicDetection true
ScanELF true
IdleTimeout 30
MailMaxRecursion 64
PhishingSignatures true
PhishingScanURLs true
PhishingRestrictedScan true
PhishingAlwaysBlockSSLMismatch false
PhishingAlwaysBlockCloak false
DetectPUA false
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0

-- 
 ___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18131896.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread Stephen Gran
On Thu, Jun 26, 2008 at 04:47:01AM -0700, metamorph said:
> >I have no idea how citadel works, sorry.
> 
> Ok, fair enough, but could you let me know what I am doing wrong when I try
> to set clamd to run on a specific TCP port-I think I can make it work after
> I have a specific/constant address to call?
> 
> I tried adding this to the clamd.conf file in etc/clamav:
> 1. TCPSocket 3310
> 2. Restarted clamd:  clamd restart

That's not actually a command.  You want 
/etc/init.d/clamav-daemon restart

> #Automatically Generated by clamav-base postinst
> #To reconfigure clamd run #dpkg-reconfigure clamav-base
> #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
> #LocalSocket /var/run/clamav/clamd.ctl
> FixStaleSocket true
> User clamav
> AllowSupplementaryGroups false
> ScanMail true
> ScanArchive true
> ArchiveMaxRecursion 5
> ArchiveMaxFiles 1000
> ArchiveMaxFileSize 10M
> ArchiveMaxCompressionRatio 250
> ArchiveLimitMemoryUsage false
> ArchiveBlockEncrypted false
> MaxDirectoryRecursion 15
> FollowDirectorySymlinks false
> FollowFileSymlinks false
> ReadTimeout 180
> MaxThreads 12
> MaxConnectionQueueLength 15
> StreamMaxLength 10M
> LogSyslog false
> LogFacility LOG_LOCAL6
> LogClean false
> LogVerbose false
> PidFile /var/run/clamav/clamd.pid
> DatabaseDirectory /var/lib/clamav
> TemporaryDirectory /tmp
> SelfCheck 3600
> Foreground false
> Debug false
> ScanPE true
> ScanOLE2 true
> ScanHTML true
> DetectBrokenExecutables false
> MailFollowURLs false
> ArchiveBlockMax false
> ExitOnOOM false
> LeaveTemporaryFiles false
> AlgorithmicDetection true
> ScanELF true
> IdleTimeout 30
> MailMaxRecursion 64
> PhishingSignatures true
> PhishingScanURLs true
> PhishingRestrictedScan true
> PhishingAlwaysBlockSSLMismatch false
> PhishingAlwaysBlockCloak false
> DetectPUA false
> LogFile /var/log/clamav/clamav.log
> LogTime true
> LogFileUnlock false
> LogFileMaxSize 0

I don't actually see TCPSocket in that list?  Maybe try 
dpkg-reconfigure -plow clamav-base

And take the tcp option instead of the default Unix socket option.

Take care,
-- 
 --
|  Stephen Gran  | QOTD:  "I tried buying a goat instead   |
|  [EMAIL PROTECTED] | of a lawn tractor; had to return  it|
|  http://www.lobefin.net/~steve | though.  Couldn't figure out a way to   |
|| connect the snow blower."   |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread Stephen Gran
On Thu, Jun 26, 2008 at 01:53:12PM +0100, Stephen Gran said:
> I don't actually see TCPSocket in that list?  Maybe try 
> dpkg-reconfigure -plow clamav-base

It just occured to me that this may not work, given your earlier symlink
command - the perl module used by dpkg-reconfigure may be gone.  You may
need to do:
apt-get install --reinstall debconf

To fix it.
-- 
 --
|  Stephen Gran  | Taxes are going up so fast, the |
|  [EMAIL PROTECTED] | government is likely to price itself|
|  http://www.lobefin.net/~steve | out of the market.  |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread metamorph



Stephen Gran-2 wrote:
> 
>>On Thu, Jun 26, 2008 at 01:53:12PM +0100, Stephen Gran said:
>> I don't actually see TCPSocket in that list?  Maybe try 
>> dpkg-reconfigure -plow clamav-base
> 
>>It just occured to me that this may not work, given your earlier symlink
>>command - the perl module used by dpkg-reconfigure may be gone.  You may
>>need to do:
>>apt-get install --reinstall debconf
> 
>>To fix it.
> 
> I reinstalled:
>  apt-get install --reinstall debconf
> Reading package lists... Done
> Building dependency tree   
> Reading state information... Done
> 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 6 not
> upgraded.
> Need to get 153kB of archives.
> After this operation, 0B of additional disk space will be used.
> Do you want to continue [Y/n]? Y
> Get:1 http://us.archive.ubuntu.com hardy/main debconf 1.5.20 [153kB]
> Fetched 153kB in 2s (62.7kB/s)  
> Preconfiguring packages ...
> (Reading database ... 140011 files and directories currently installed.)
> Preparing to replace debconf 1.5.20 (using .../debconf_1.5.20_all.deb) ...
> Unpacking replacement debconf ...
> Setting up debconf (1.5.20) ...
> 
> Restarted clamd:
>  /etc/init.d/clamav-daemon restart
>  * Stopping ClamAV daemon clamd  [
> OK ] 
>  * Starting ClamAV daemon clamd  
> 
> Checked to see if anything changed:
> ps ax | grep [c]lamd
>  5514 ?Ss 0:02 /usr/sbin/clamd
> 11815 ?Ss 0:02 /usr/sbin/clamd
> 
> Any other suggestions on what to check or something else I need to change?
> I really appreciate your help.
> 
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 

-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18133827.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread Stephen Gran
On Thu, Jun 26, 2008 at 06:28:54AM -0700, metamorph said:
> Restarted clamd:
>  /etc/init.d/clamav-daemon restart
>  * Stopping ClamAV daemon clamd  [
> OK ] 
>  * Starting ClamAV daemon clamd  
> 
> Checked to see if anything changed:
> ps ax | grep [c]lamd
>  5514 ?Ss 0:02 /usr/sbin/clamd
> 11815 ?Ss 0:02 /usr/sbin/clamd

It looks like your earlier 'clamd restart' overwrote the pidfile used to
kill clamd, so the wrong one was killed.  run
kill 5514 11815

make sure they're dead (ps)

Test whether you actually have the option enabled:
clamconf | grep TCPSocket

If not:
dpkg-reconfigure -plow clamav-base

then:
/etc/init.d/clamav-daemon start

and 
netstat -plant

to verify that it is listening on 3310

> Any other suggestions on what to check or something else I need to change?
> I really appreciate your help.

Not trying to be disparaging, but do you have anyone local you can turn
to for support?  It seems like you might be a bit over your head, both
with basic system administration and with clamav.  I can help as I have
time, but it seems like you might need some help in other areas as well
that aren't completely appropriate for the clamav lists.
-- 
 --
|  Stephen Gran  | Drinking makes such fools of people,|
|  [EMAIL PROTECTED] | and people are such fools to begin  |
|  http://www.lobefin.net/~steve | with, that it's compounding a felony.   |
|| -- Robert Benchley  |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread metamorph



Stephen Gran-2 wrote:
> 
> On Thu, Jun 26, 2008 at 06:28:54AM -0700, metamorph said:
>> Restarted clamd:
>>  /etc/init.d/clamav-daemon restart
>>  * Stopping ClamAV daemon clamd 
>> [
>> OK ] 
>>  * Starting ClamAV daemon clamd  
>> 
>> Checked to see if anything changed:
>> ps ax | grep [c]lamd
>>  5514 ?Ss 0:02 /usr/sbin/clamd
>> 11815 ?Ss 0:02 /usr/sbin/clamd
> 
> It looks like your earlier 'clamd restart' overwrote the pidfile used to
> kill clamd, so the wrong one was killed.  run
> kill 5514 11815
> 
> make sure they're dead (ps)
> 
> Test whether you actually have the option enabled:
> clamconf | grep TCPSocket
> 
> If not:
> dpkg-reconfigure -plow clamav-base
> 
> then:
> /etc/init.d/clamav-daemon start
> 
> and 
> netstat -plant
> 
> to verify that it is listening on 3310
> 
>> Any other suggestions on what to check or something else I need to
>> change?
>> I really appreciate your help.
> 
>>Not trying to be disparaging, but do you have anyone local you can turn
>>to for support?  It seems like you might be a bit over your head, both
>>with basic system administration and with clamav.  I can help as I have
>>time, but it seems like you might need some help in other areas as well
>>that aren't completely appropriate for the clamav lists.
> -- 
> 
> Thanks for the replies.  I will keep reading up on perl basics.
>  
> Fixed it. After you helped restore the defaults.  It was one dumb line, ie
> needed TCPAddr 127.0.0.1 in the clamd.conf and restart.  I will try to get
> up to speed with some more appropriate posts--I see where you are coming
> from, but I am just a NOOB trying to learn.
> 
> Now netstat -lpn shows:
> tcp0  0 127.0.0.1:3310  0.0.0.0:*   LISTEN
>  
> 13382/clamd
> 
> Thanks for all your help... I really appreciate it.
> 
>  
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 

-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18134397.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-26 Thread Stephen Gran
On Thu, Jun 26, 2008 at 06:51:47AM -0700, metamorph said:
> I will try to get up to speed with some more appropriate posts--I see
> where you are coming from, but I am just a NOOB trying to learn.

Everyone starts there, and it's nothing to be ashamed of.  All I was
trying to say was that while you're ramping up to speed, some additional
sources of help would probably benefit you.

Good luck, and glad it worked out for you,
-- 
 --
|  Stephen Gran  | Dental health is next to mental health. |
|  [EMAIL PROTECTED] | |
|  http://www.lobefin.net/~steve | |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-27 Thread metamorph

>Quote from earlier post:
>Assuming you actually
>have an /etc/spamassassin/clamav.pm (note the leading /), it is failing
>to parse.  There are literally dozens of reasons for why this could be,

Thanks for your replies.
Quote from citadel:
run your mail through some sort of intermediate MTA with ClamAV attached to
it. The normal configuration for Citadel is to have SpamAssassin call
ClamAV. 

I really would like to get this hook to work.  The mail system works great
except for the antivirus, so I have been constantly reading old
posts/guides/basic commands everywhere and no solutions were found the few
times this question has been raised.

Based on the above quote is there anyway you could tell me a few hints on
the most common causes for such an error-- it looks like this is the only
solution?  

Any suggestions are greatly appreciated.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18153502.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-06-27 Thread metamorph

Solved:
renamed ClamAV.pm to clamav.pm 

Thanks for your help.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml




-- 
View this message in context: 
http://www.nabble.com/ClamAV-Plugin-for-Spamassassin-tp18113891p18155255.html
Sent from the clamav-users mailing list archive at Nabble.com.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-07-01 Thread Sergey
On Wednesday 25 June 2008, metamorph wrote:

> I really appreciate any help or suggestions.  
 
What MTA are you using ? If it is Postfix or Sendmail you can use
another way: Spamassassin and ClamAV can be called from Mailfromd
milter.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml