[Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Jon Rowlan
I am rather embarrassed to say that after years of using MD, I have
recently decided to bite the bullet and install a new Debian version and
update all the associated tools that I use and for the life of me I
cannot get md_syslog to work.

I am not sure whether there are any tools to debug perl that I can
usefully use in a text based SSH putty window so I use md_syslog for
trace output in my other servers.

I have this set in sendmail.mc

define(`confMILTER_LOG_LEVEL', 14)dnl
define(`confLOG_LEVEL', 14)

I have the library

libunix-syslog-perl

installed.

Somewhere there is a setting eluding me I am sure but I am damned if I
can find it !

Can anyone please advise?

Many thanks

jON


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Kees Theunissen
On Wed, 23 Apr 2014, Jon Rowlan wrote:

>I am rather embarrassed to say that after years of using MD, I have
>recently decided to bite the bullet and install a new Debian version and
>update all the associated tools that I use and for the life of me I
>cannot get md_syslog to work.

Might be a stupid question, but anyway: are you sure that you have a
syslog daemon installed.

The sysklogd package seems to be removed from debian wheezy.
A dist-upgrade from squeeze to wheezy removed the sysklogd package
from serveral of my systems without installing a replacement.  :-(

I'm now using the rsyslog package on my wheezy systems.



Regards,

Kees Theunissen.

-- 
Kees Theunissen,  System and network manager,   Tel: +31 (0)30 6096724
Dutch Institute For Fundamental Energy Research (DIFFER)
e-mail address:   c.j.theunis...@differ.nl
postal address:   PO Box 1207, 3430 BE Nieuwegein, NL
visitors address: Edisonbaan 14, 3439 MN Nieuwegein, NL

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Jon Rowlan
>> Might be a stupid question, but anyway: are you sure that you have a
syslog daemon installed.

Not really a stupid question Kees, I hadn't checked that :-)

I am using Wheezy and this is a clean new install and not an upgrade. 
Syslogd is a virtual package as far as I can tell from Aptitude. It's
the only thing listed when I search for sysklogd.

ps reports that I have rsyslogd running ..

2004 1  0 Apr23 ?00:00:00 /usr/sbin/rsyslogd -c5

I get basic mail.log logging ok, just not the md_syslog extra detail
which is why I raised logging level for Milters and sendmail.

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 24 Apr 2014, Jon Rowlan wrote:


I get basic mail.log logging ok, just not the md_syslog extra detail
which is why I raised logging level for Milters and sendmail.


md_syslog() submits the logs to the syslog demon directly, check out 
_wrap_for_sys_syslog/_wrap_for_unix_syslog in mimedefang.pl.


Maybe you mimmick / test syslog with the code of mimedefang.pl and see 
where the logs are going. Maybe you need to enabled the "tag" or 
everything is in same generic log file.


- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBU1izNlGgR0+MU/4GAQK+jAf8C+LT5GqCUm8Y2Bh6Tu/+TpgSWdDBdhX2
uDRc9XwvTRTNC9QbP2TzEE6jVDRyohtPPkYRZea94QDB90JwazTiRpGrdScrSgy0
FpOmOXgX9hA4WI/xTBd+UvXZXXRqdXRW3cDuVVGcSGJdR6w1Lc8RpRpaULuKL2FU
rB8Z2eLwDaqVPgGryE+xvRBrxPLo8ScBv4nCMOyM3DZeGTO6lhWRqyRe/wJ7nMLj
UfRGF+pXPXUiYe6YLgY2axQLZigvhbx9qJzbqb2+fHaOntL7kOBW1PXiljBCaW6X
oSLsgFHBQGzYZ735EPfTv9VrUPoIXeeugkooRAYdjYOliZiSD5ZnjQ==
=HVhp
-END PGP SIGNATURE-
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-24 Thread Jon Rowlan
>> Maybe you mimmick / test syslog with the code of mimedefang.pl and
see where the logs are going. Maybe you need to enabled the "tag" or
everything >> is in same generic log file.

I am struggling to get this working, whilst I am happy with my basic
knowledge of Perl fiddling with the filter, I am not knowledgable enough
about Perl to test the use of SysLogD. Everything I have tried just
doesn't work.

Can anyone give me a snippet or two that will test the two types of
syslog that I may have in place, it would really help me out as I am
very keen to get MD working so I can get my relat in place.

Thanks all.

jON
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Jon Rowlan
You are a star Steffen, thank you.

I was getting very close to this with my hacking, its interesting to see
how to use Perl outside of MD.

This script creates entries in mail.log fine.

Apr 25 11:03:47  mimedefang.pl[23318]: Unix::Syslog TEST warning
Apr 25 11:03:47  mimedefang.pl[23318]: Sys::Syslog TEST info
Apr 25 11:03:47  mimedefang.pl[23318]: Sys::Syslog TEST warning

But MD does not, is there a logging level setting somewhere that I am
missing?

Thanks again for the code ... much appreciated.

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Jon Rowlan
It seems that my interpretation of the symptoms is incorrect.

It wasn't that md_syslog was not working ... more that my filter was in
the wrong place and never called!

Can someone please confirm, is it possible to remove the block of text
added by MD which has the link to the MD web site
http://www.roaringpenguin.com/mimedefang/enduser.php3 ?

I prefer the previous version generic message.

Thanks for the help all,

jON
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Jon Rowlan
Please ignore me. Silly question, I was not looking in the right place.

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Matt Garretson
On 4/25/2014 1:23 PM, Jon Rowlan wrote:
> I prefer the previous version generic message.

Previous?  You're running MD 2.71 which is quite "previous", itself. :)

Currently (as of 2.74) the default is:

  X-Scanned-By: MIMEDefang 2.74 on 10.1.1.1

(Where 10.1.1.1 is whatever IP address MD is running on)


As the mimedefang man page states, you can use one of these 
options to change that behavior:

  -x string
   Add  string as the content of the X-Scanned-By: header.  
   If you set string to the empty string (i.e. -x ""), then 
   no X-Scanned-By: header will be added.

  -X
   Do not add an X-Scanned-By: header.  Specifying -X is 
   equivalent to specifying -x "".


Although 2.71 is 4 years old, the situation is probably similar.



___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Jon Rowlan
> Previous?  You're running MD 2.71 which is quite "previous", itself.
:)

Yes, sadly I am using a Debian Distro, it's a little disappointing to
think that I bite the bullet and go for the very latest "Wheezy" which
in the last few months went from unstable to stable (i.e. very latest)
and MD that is part of it is 4 years old!

Its difficult to assess just how much has happened in 4 years ...

Should I go for a compile my own do you think Matt?

jON
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Matt Garretson
On 4/25/2014 2:06 PM, Jon Rowlan wrote:
> Should I go for a compile my own do you think Matt?

I suppose that, if you don't have problems, 2.71 is fine.  Attached is
the change log since 2.71 to help you decide.

OTOH, it's not difficult to compile & install MIMEdefang, as long as you
have some familiarity with the general process of working with
Autoconf and Make files, etc..  The hard part will be the perl module
dependencies, as some of what you have may be too old to work with the
latest MD.  In that case, there's always CPAN.  But that adds extra hassle.

Personally, on my mail servers, I always build sendmail, mimedefang,
spamassassin, and clamav from source. (Even if the distro has
up-to-date packages.)

My advice would be to stick with what your distro gives you, unless
you encounter problems, or just want to have fun installing 2.74
yourself.  :)
WARNING: Before upgrading MIMEDefang, please search this file for
*** NOTE INCOMPATIBILITY ** to see if anything has changed that might
affect your filter.

2013-05-27 David F. Skoll 

* MIMEDefang 2.74 RELEASED

2013-05-25 David F. Skoll 

* Increase buffer size for md-mx-ctrl responses.

2013-01-22 David F. Skoll 

* Close input file handle in append_to_html_part.  Bug found by
Kees Theunissen.

2012-09-17 David F. Skoll 

* Add action_add_entity function.

* Simplify code in action_replace_with_warning.

2012-06-18 David F. Skoll 

* Remove obsolete text from man page.

* Avoid deprecated "defined(@array)" construct.

2012-03-27 David F. Skoll 

* Implement new "load1" md-mx-ctrl command which gives statistics
in more useful format than "load"

* get_mx_ip_addresses: Treat MX records of '', '.', '0', '0.', '0
.' and '0 ' as bogus.

* watch-multiple-mimedefangs.tcl: Major improvements; see the
new -n, -r, -s and -t command-line options.

2012-02-07 David F. Skoll 

* Add rcpt_addr, rcpt_host and rcpt_mailer to default set of
macros that we ask for.

* Log Sendmail queue ID in more places.

* Remove dead "connect_to_socket" routine in mimedefang.pl

* Do not invokve smfi_setsymlist unless "-y" option to
mimedefang is given.  smfi_setsymlist leaks memory in versions
of Sendmail prior to 8.14.4.

2012-01-23 David F. Skoll 

* MIMEDefang 2.73 RELEASED

2012-01-20 David F. Skoll 

* Create /var/spool/MIMEDefang with mode 0750 by default.

2012-01-18 David F. Skoll 

* Make the -G option cause files created by mimedefang to
be group-readable.  Add the new MD_ALLOW_GROUP_ACCESS init script
variable.

2011-12-21 David F. Skoll 

* Make the multiplexor snoop in on communications and save the
Sendmail queue-ID for logging purposes.  It logs the queue ID when
logging a slave's STDERR.

2011-12-12 David F. Skoll 

* Make configure.in check whether or not libmilter requires -lldap.

* Fix Graphdefang to handle new md_syslog output style.

* Always check return code from chdir() in mimedefang.pl.  In
certain cases on large and heavily-loaded servers, if the chdir()
failed MIMEDefang would end up working in the wrong directory with
attendant chaos.

* Add "-G" option to mimedefang and mimedefang-multiplexor.  This
makes their sockets group-readable and group-writable.

* Pass along the client port number, server IP address and server port
number to all filter functions.  This feature was sponsored by Scayl.

2011-07-20  David F. Skoll 

* MIMEDefang 2.72 RELEASED

2011-06-20  David F. Skoll 

* MIMEDefang 2.72-BETA-2

* The "make unstripped" target has disappeared.  Instead,
use:  make INSTALL_STRIP_FLAG=''

* The RPM_INSTALL_ROOT make variable has disappeared.  Instead,
use the standard DESTDIR:  make install DESTDIR=/some/dir

* In mimedefang.c, truncate overlong responses from the multiplexor.
Also sanitize replies so "\r" doesn't get fed to smfi_setmlreply.

* If a slave process replies with a very long reply, have the
multiplexor consume (and discard) the excess input so the
multiplexor-to-slave protocol does not become de-synchronized.

2011-06-16  David F. Skoll 

* When mimedefang becomes a daemon, have it wait for a
"go/no-go" message from the child before exiting.  This should
eliminate race conditions whereby the MTA starts before the
milter socket is present.

* Revert change in 2.72-BETA-1 that passed client port number.
It was a hack; we need a proper way to pass largish amounts of
information to the filter and that will have to wait for a major
reworking of MIMEDefang.

2010-11-01  David F. Skoll 

* MIMEDefang 2.72-BETA-1

* Avoid run-time errors from Unix::Syslog on some platforms

Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Kevin A. McGrail

On 4/25/2014 2:26 PM, Matt Garretson wrote:

Personally, on my mail servers, I always build sendmail, mimedefang,
spamassassin, and clamav from source. (Even if the distro has
up-to-date packages.)
Amen...  I love package-based systems to get up and running and maintain 
99.9% of the server but for the "reason to live" programs, that's best 
left to source or your own custom packages.

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Jon Rowlan
I am very tempted to try a source compile once I have a stable platform
on my live server.

One thing that seems to still hamper me is the permissions issues I get.

I like to use MD / SA / Clam.

I still suffer on my old servers with Freshclam and the fact that some
of the clam Daemons are run as user Defang.

What I would like to do is standardise the combination.

Is it possible to add defang and clamav users to a group and apply group
permissions so these can all talk happily together rather than me have
to change .conf file username settings ..

So that I can update each package independantly and quickly integrate? I
could write a single script to set folder perms for the group permission
then. 

Does anyone have any "up and running faster" tips for this scenario?

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-25 Thread Matt Garretson
On 4/25/2014 3:10 PM, Jon Rowlan wrote:
> Is it possible to add defang and clamav users to a group and apply group
> permissions so these can all talk happily together rather than me have
> to change .conf file username settings ..


Yes.  All you have to do is add the clamav user to the defang group,
and make sure your MIMEdefang spool dir has permissions equivalent
to this:

drwxr-x--- 9 defang defang 260 2014-04-25 15:36 /var/spool/MIMEDefang/

My spool dir is a tmpfs so I put those permissions into fstab to
ensure they are set at mount time.

I also use the -G option for MIMEdefang, but I can't remember if
it's necessary.

If you have selinux enabled, you may have other issues.  But I always
disable it.


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-26 Thread Jon Rowlan
> Yes.  All you have to do is add the clamav user to the defang group,
and make sure your MIMEdefang spool dir has permissions equivalent to
this:
> drwxr-x--- 9 defang defang 260 2014-04-25 15:36 /var/spool/MIMEDefang/

I did that and cannot get the daemonised clam working as there still
seems to be a permissions issue but I see that the command line clamav
is running fine and picking up EiCar. That's good, I presume that is
sufficient?

> I also use the -G option for MIMEdefang, but I can't remember if it's
necessary.
I can't find any reference to -G in man of mimedefang,
mimedefang-multiplexor or mimedefang-filter.

> If you have selinux enabled, you may have other issues.  But I always
disable it.
apparently (as far as I can see from articles I have found) selinux is
installed in Debian Wheezy but disabled.

Thanks Matt!

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-28 Thread Nels Lindquist
On 4/25/2014 1:49 PM, Matt Garretson wrote:

> I also use the -G option for MIMEdefang, but I can't remember if 
> it's necessary.

That option was introduced in 2.73.  I don't think 2.71 requires it.

Nels Lindquist



___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-28 Thread Matt Garretson
On 4/26/2014 5:50 AM, Jon Rowlan wrote:
> I did that and cannot get the daemonised clam working as there still
> seems to be a permissions issue but I see that the command line clamav
> is running fine and picking up EiCar. That's good, I presume that is
> sufficient?


Well, if you'll be scanning any significant amount of email, you'll
definitely want to get clamd up & running.  Although MIMEdefang is able
to find and use the stand-alone command-line scanner (clamscan), that
would be much less desirable than having clamd up, allowing MD to talk
directly to the clamd socket.  This would save a lot of overhead for
each scan.

Nels wrote in another reply that your version of MD does not have the -G
option, so the advice I gave Friday might not work.  You might have to
make clamd run as the defang user.  To do this, you'd have to edit your
clamd.conf and your freshclam.conf, as well as checking the permissions
of your clamav database directory.

But, before doing that, it might be a good idea to first get clamd
running so that clamdscan works. After that, then you can work on
getting the permissions right for MIMEDefang to use clamd.


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-28 Thread Jon Rowlan
> Well, if you'll be scanning any significant amount of email, you'll
definitely want to get clamd up & running.  
> Although MIMEdefang is able to find and use the stand-alone
command-line scanner (clamscan), that 
> would be much less desirable than having clamd up, allowing MD to talk
directly to 
> the clamd socket.  This would save a lot of overhead for each scan.

Clamdscan works fine at the command line, its just that I am struggling
to get the clam scan of any kind working via the socket.

> Nels wrote in another reply that your version of MD does not have the
-G option, so the advice I gave 
> Friday might not work.  You might have to make clamd run as the defang
user.  To do this, 
> you'd have to edit your clamd.conf and your freshclam.conf, as well as
checking the 
> permissions of your clamav database directory.

What does the -G do, I wonder whether I should upgrade to get the latest
and greatest. But initially I want to get a distro version working ...

Thanks Matt,

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-28 Thread Matt Garretson
On 4/28/2014 3:27 PM, Jon Rowlan wrote:
> Clamdscan works fine at the command line, its just that I am struggling
> to get the clam scan of any kind working via the socket.

Do you have

   AllowSupplementaryGroups yes

in your clamd.conf and freshclam.conf?



___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-28 Thread Kees Theunissen
On Mon, 28 Apr 2014, Jon Rowlan wrote:

>Clamdscan works fine at the command line, its just that I am struggling
>to get the clam scan of any kind working via the socket.

Did you configure MIMEdefang somehow to use that socket?

This is my /etc/mail/mimedefang.pl.conf on a debian server:

- 8< ---
# Mimedefang configuration file
# This file is a perl file which gets 'require'd from mimedefang
# You can set the virus-scanner paths etc.
# See mimedefang.pl

$Features{'Path:QUARANTINEDIR'} = '/var/spool/MD-Quarantine';
$Features{'Virus:CLAMAV'} = '/usr/bin/clamscan';
$Features{'Virus:CLAMD'} = 1;
$ClamdSock = '/var/run/clamav/clamd.ctl';

# DO NOT delete the next line, or Perl will complain.
1;
- 8< ---

Debian modified /usr/bin/mimedefang.pl to 'require' this file.



Regards,

Kees Theunissen.

-- 
Kees Theunissen,  System and network manager,   Tel: +31 (0)30 6096724
Dutch Institute For Fundamental Energy Research (DIFFER)
e-mail address:   c.j.theunis...@differ.nl
postal address:   PO Box 1207, 3430 BE Nieuwegein, NL
visitors address: Edisonbaan 14, 3439 MN Nieuwegein, NL

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-05-04 Thread Jon Rowlan
> Did you configure MIMEdefang somehow to use that socket?

> This is my /etc/mail/mimedefang.pl.conf on a debian server:

Thanks Kees, I have that file, I will try this out.

jON
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-05-05 Thread Jon Rowlan

On Mon, 28 Apr 2014, Jon Rowlan wrote:

>Clamdscan works fine at the command line, its just that I am struggling

>to get the clam scan of any kind working via the socket.

Did you configure MIMEdefang somehow to use that socket?

This is my /etc/mail/mimedefang.pl.conf on a debian server:

- 8< ---
# Mimedefang configuration file
# This file is a perl file which gets 'require'd from mimedefang # You
can set the virus-scanner paths etc.
# See mimedefang.pl

$Features{'Path:QUARANTINEDIR'} = '/var/spool/MD-Quarantine';
$Features{'Virus:CLAMAV'} = '/usr/bin/clamscan';
$Features{'Virus:CLAMD'} = 1; $ClamdSock = '/var/run/clamav/clamd.ctl';

# DO NOT delete the next line, or Perl will complain.
1;
- 8< ---

Debian modified /usr/bin/mimedefang.pl to 'require' this file.

I have just discovered that I do not have clamscan on my server but
clamdscan appears to work from the command line.

So I think that means that I have a correctly configured daemonised clam
install and clamdscan will using the socket I presume?

Thanks Kees,

jON

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang