On Tue, 29 Aug 2006 13:07:50 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote:
>x-virus header is now shown, but it doesnt drop the file. i think it would >be better, because outlook doesnt show any warning, header isnt rewritten, >file isnt dropped. so its still unsecure :-/ > > > >Mit freundlichen Grüßen > >Jürgen Ladstätter ( [EMAIL PROTECTED] ) > >_______________________________________________ > >P.I.C.S. EDV GmbH. >A-5020 Salzburg, Landsturmstraße 18 >Tel.: +43 (662) 455467 >Fax.: +43 (662) 455468 > >Web: <http://www.pics.co.at> http://www.pics.co.at >E-Mail: [EMAIL PROTECTED] >Ihr Partner für Internet, Computer und Software >_______________________________________________ > > _____ > >Von: Sietse van Zanen [mailto:[EMAIL PROTECTED] >Gesendet: Dienstag, 29. August 2006 11:27 >An: users@spamassassin.apache.org >Betreff: RE: Problems with ClamAV Plugin > > > >The plugin is only a piping mechanism between SA and ClamAV, it's not ClamAV >itself. > > > >Try installing via cpan: > >Mail::SpamAssassin::PerMsgStatus > >File::Scan::ClamAV > > > >Oh, and you also seem to be lacking: > >[7722] dbg: diag: module not installed: Mail::SPF::Query ('require' failed) > >[7722] dbg: diag: module not installed: IP::Country::Fast ('require' failed) > >[7722] dbg: diag: module not installed: Razor2::Client::Agent ('require' >failed) > >[7722] dbg: diag: module not installed: Net::Ident ('require' failed) > > > >Might come in handy if you also want to run these checks. > > > >-Sietse > > > > > > _____ > >From: Jürgen Ladstätter >Sent: Tue 29-Aug-06 10:42 >To: users@spamassassin.apache.org >Subject: Problems with ClamAV Plugin > >Hi list, > > > >i found the clamav plugin and thought thats a good idea :) so i did >everything how it was explained, but no virus header is added to an email. >also eicar testvirus is going through. logs tell my why: > > > >Aug 29 10:22:23 TS_webserver spamd[7247]: spamd: processing message ><[EMAIL PROTECTED]> for web0p1:0 >Aug 29 10:22:23 TS_webserver spamd[7247]: rules: failed to run CLAMAV test, >skipping: >Aug 29 10:22:23 TS_webserver spamd[7247]: (Can't locate object method >"check_clamav" via package "Mail::SpamAssassin::PerMsgStatus" at >/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line >2614, <GEN4> line 163. >Aug 29 10:22:23 TS_webserver spamd[7247]: ) >Aug 29 10:22:23 TS_webserver spamd[7247]: spamd: clean message (0.1/5.0) for >web0p1:0 in 0.8 seconds, 4815 bytes. > > > > > >/usr/bin/spamassassin lint says: > >TSwebserver spamassassin # /usr/bin/spamassassin --lint > >[7703] warn: plugin: failed to parse plugin (from @INC): Can't locate >File/Scan/ClamAV.pm in @INC (@INC contains: >/usr/lib/perl5/vendor_perl/5.8.8/i386-linux /usr/lib/perl5/vendor_perl/5.8.8 >/etc/perl /usr/lib/perl5/vendor_perl/5.8.7 >/usr/lib/perl5/vendor_perl/5.8.7/i386-linux /usr/lib/perl5/vendor_perl >/usr/lib/perl5/site_perl/5.8.8/i386-linux /usr/lib/perl5/site_perl/5.8.8 >/usr/lib/perl5/site_perl /usr/lib/perl5/5.8.8/i386-linux >/usr/lib/perl5/5.8.8 /usr/local/lib/site_perl .) at (eval 69) line 1. > >[7703] warn: plugin: failed to create instance of plugin File::Scan::ClamAV: >Can't locate object method "new" via package "File::Scan::ClamAV" at (eval >70) line 1. > >[7703] warn: plugin: failed to parse plugin >/etc/mail/spamassassin/clamav.pm: Can't locate File/Scan/ClamAV.pm in @INC >(@INC contains: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux >/usr/lib/perl5/vendor_perl/5.8.8 /etc/perl /usr/lib/perl5/vendor_perl/5.8.7 >/usr/lib/perl5/vendor_perl/5.8.7/i386-linux /usr/lib/perl5/vendor_perl >/usr/lib/perl5/site_perl/5.8.8/i386-linux /usr/lib/perl5/site_perl/5.8.8 >/usr/lib/perl5/site_perl /usr/lib/perl5/5.8.8/i386-linux >/usr/lib/perl5/5.8.8 /usr/local/lib/site_perl .) at >/etc/mail/spamassassin/clamav.pm line 5. > >[7703] warn: BEGIN failed--compilation aborted at >/etc/mail/spamassassin/clamav.pm line 5. > >[7703] warn: plugin: failed to create instance of plugin ClamAV: Can't >locate object method "new" via package "ClamAV" at (eval 225) line 1. > >[7703] warn: config: failed to parse line, skipping: auto_learn 1 > >[7703] warn: rules: failed to run CLAMAV test, skipping: > >[7703] warn: (Can't locate object method "check_clamav" via package >"Mail::SpamAssassin::PerMsgStatus" at >/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line >2614. > >[7703] warn: ) > >[7703] warn: lint: 2 issues detected, please rerun with debug enabled for >more information > > > >/usr/bin/spamassassin lint debug says: > >TSwebserver spamassassin # /usr/bin/spamassassin --lint --debug > >[7722] dbg: logger: adding facilities: all > >[7722] dbg: logger: logging level is DBG > >[7722] dbg: generic: SpamAssassin version 3.1.3 > >[7722] dbg: config: score set 0 chosen. > >[7722] dbg: util: running in taint mode? no > >[7722] dbg: message: ---- MIME PARSER START ---- > >[7722] dbg: message: main message type: text/plain > >[7722] dbg: message: parsing normal part > >[7722] dbg: message: added part, type: text/plain > >[7722] dbg: message: ---- MIME PARSER END ---- > >[7722] dbg: dns: is Net::DNS::Resolver available? yes > >[7722] dbg: dns: Net::DNS version: 0.53 > >[7722] dbg: diag: perl platform: 5.008008 linux > >[7722] dbg: diag: module installed: Digest::SHA1, version 2.11 > >[7722] dbg: diag: module installed: MIME::Base64, version 3.07 > >[7722] dbg: diag: module installed: HTML::Parser, version 3.48 > >[7722] dbg: diag: module installed: DB_File, version 1.814 > >[7722] dbg: diag: module installed: Net::DNS, version 0.53 > >[7722] dbg: diag: module installed: Net::SMTP, version 2.29 > >[7722] dbg: diag: module not installed: Mail::SPF::Query ('require' failed) > >[7722] dbg: diag: module not installed: IP::Country::Fast ('require' failed) > >[7722] dbg: diag: module not installed: Razor2::Client::Agent ('require' >failed) > >[7722] dbg: diag: module not installed: Net::Ident ('require' failed) > >[7722] dbg: diag: module installed: IO::Socket::INET6, version 2.51 > >[7722] dbg: diag: module installed: IO::Socket::SSL, version 0.97 > >[7722] dbg: diag: module installed: Time::HiRes, version 1.86 > >[7722] dbg: diag: module installed: DBI, version 1.50 > >[7722] dbg: diag: module installed: Getopt::Long, version 2.35 > >[7722] dbg: diag: module installed: LWP::UserAgent, version 2.033 > >[7722] dbg: diag: module installed: HTTP::Date, version 1.46 > >[7722] dbg: diag: module installed: Archive::Tar, version 1.28 > >[7722] dbg: diag: module installed: IO::Zlib, version 1.04 > >[7722] dbg: ignore: using a test message to lint rules > >[7722] dbg: config: using "/etc/mail/spamassassin" for site rules pre files > >[7722] dbg: config: read file /etc/mail/spamassassin/init.pre > >[7722] dbg: config: read file /etc/mail/spamassassin/v310.pre > >[7722] dbg: config: read file /etc/mail/spamassassin/v312.pre > >[7722] dbg: config: using "/usr/share/spamassassin" for sys rules pre files > >[7722] dbg: config: using "/usr/share/spamassassin" for default rules dir > >[7722] dbg: config: read file /usr/share/spamassassin/10_misc.cf > >[7722] dbg: config: read file /usr/share/spamassassin/11_gentoo.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_compensate.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_drugs.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_phrases.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_porn.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_ratware.cf > >[7722] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf > >[7722] dbg: config: read file /usr/share/spamassassin/23_bayes.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_dcc.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_dkim.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_razor2.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_replace.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_spf.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_textcat.cf > >[7722] dbg: config: read file /usr/share/spamassassin/25_uribl.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_de.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_it.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf > >[7722] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf > >[7722] dbg: config: read file /usr/share/spamassassin/50_scores.cf > >[7722] dbg: config: read file /usr/share/spamassassin/60_awl.cf > >[7722] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf > >[7722] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf > >[7722] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf > >[7722] dbg: config: read file >/usr/share/spamassassin/60_whitelist_subject.cf > >[7722] dbg: config: using "/etc/mail/spamassassin" for site rules dir > >[7722] dbg: config: read file /etc/mail/spamassassin/clamav.cf > >[7722] dbg: config: read file /etc/mail/spamassassin/local.cf > >[7722] dbg: config: using "/root/.spamassassin" for user state dir > >[7722] dbg: config: using "/root/.spamassassin/user_prefs" for user prefs >file > >[7722] dbg: config: read file /root/.spamassassin/user_prefs > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from @INC > >[7722] dbg: dcc: network tests on, registering DCC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::DCC=HASH(0x8ec6284) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC > >[7722] dbg: pyzor: network tests on, attempting Pyzor > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e9cf1c) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC > >[7722] dbg: razor2: razor2 is not available > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::Razor2=HASH(0x8ee3310) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC > >[7722] dbg: reporter: network tests on, attempting SpamCop > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8ef8670) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::AntiVirus=HASH(0x8ecf374) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::AWL=HASH(0x8ed1d2c) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold >from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8ed2d10) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC > >[7722] dbg: textcat: loading languages file... > >[7722] dbg: textcat: loaded 73 language models > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::TextCat=HASH(0x8f2bd5c) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::AccessDB=HASH(0x9173eb8) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject >from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9176dcc) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9179f98) > >[7722] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from >@INC > >[7722] dbg: plugin: registered >Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x917d524) > >[7722] dbg: plugin: loading File::Scan::ClamAV from @INC > >[7722] warn: plugin: failed to parse plugin (from @INC): Can't locate >File/Scan/ClamAV.pm in @INC (@INC contains: >/usr/lib/perl5/vendor_perl/5.8.8/i386-linux /usr/lib/perl5/vendor_perl/5.8.8 >/etc/perl /usr/lib/perl5/vendor_perl/5.8.7 >/usr/lib/perl5/vendor_perl/5.8.7/i386-linux /usr/lib/perl5/vendor_perl >/usr/lib/perl5/site_perl/5.8.8/i386-linux /usr/lib/perl5/site_perl/5.8.8 >/usr/lib/perl5/site_perl /usr/lib/perl5/5.8.8/i386-linux >/usr/lib/perl5/5.8.8 /usr/local/lib/site_perl .) at (eval 69) line 1. > >[7722] warn: plugin: failed to create instance of plugin File::Scan::ClamAV: >Can't locate object method "new" via package "File::Scan::ClamAV" at (eval >70) line 1. > >[7722] dbg: config: adding redirector regex: >/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i > >[7722] dbg: config: adding redirector regex: >/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i > >[7722] dbg: config: adding redirector regex: >/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i > >[7722] dbg: config: adding redirector regex: >/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i > >[7722] dbg: config: adding redirector regex: >/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i > >[7722] dbg: config: adding redirector regex: >m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i > >[7722] dbg: config: adding redirector regex: >m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i > >[7722] dbg: config: adding redirector regex: >m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&\#])'i > >[7722] dbg: config: adding redirector regex: >m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[& >\#])'i > >[7722] dbg: config: adding redirector regex: >m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?< >=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&\#])'i > >[7722] dbg: config: adding redirector regex: >m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?< >=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&\#])'i > >[7722] dbg: config: adding redirector regex: >m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)( >?:$|[&\#])'i > >[7722] dbg: plugin: fixed relative path: /etc/mail/spamassassin/clamav.pm > >[7722] dbg: plugin: loading ClamAV from /etc/mail/spamassassin/clamav.pm > >[7722] warn: plugin: failed to parse plugin >/etc/mail/spamassassin/clamav.pm: Can't locate File/Scan/ClamAV.pm in @INC >(@INC contains: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux >/usr/lib/perl5/vendor_perl/5.8.8 /etc/perl /usr/lib/perl5/vendor_perl/5.8.7 >/usr/lib/perl5/vendor_perl/5.8.7/i386-linux /usr/lib/perl5/vendor_perl >/usr/lib/perl5/site_perl/5.8.8/i386-linux /usr/lib/perl5/site_perl/5.8.8 >/usr/lib/perl5/site_perl /usr/lib/perl5/5.8.8/i386-linux >/usr/lib/perl5/5.8.8 /usr/local/lib/site_perl .) at >/etc/mail/spamassassin/clamav.pm line 5. > >[7722] warn: BEGIN failed--compilation aborted at >/etc/mail/spamassassin/clamav.pm line 5. > >[7722] warn: plugin: failed to create instance of plugin ClamAV: Can't >locate object method "new" via package "ClamAV" at (eval 225) line 1. > >[7722] warn: config: failed to parse line, skipping: auto_learn 1 > >[7722] dbg: config: allowing user rules! > >[7722] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x917d524) >implements 'finish_parsing_end' > >[7722] dbg: replacetags: replacing tags > >[7722] dbg: replacetags: done replacing tags > >[7722] dbg: config: using "/root/.spamassassin" for user state dir > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_toks > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_seen > >[7722] dbg: bayes: found bayes db version 3 > >[7722] dbg: bayes: DB journal sync: last sync: 0 > >[7722] dbg: config: using "/root/.spamassassin" for user state dir > >[7722] dbg: bayes: not available for scanning, only 146 ham(s) in bayes DB < >200 > >[7722] dbg: bayes: untie-ing > >[7722] dbg: bayes: untie-ing db_toks > >[7722] dbg: bayes: untie-ing db_seen > >[7722] dbg: config: score set 1 chosen. > >[7722] dbg: message: ---- MIME PARSER START ---- > >[7722] dbg: message: main message type: text/plain > >[7722] dbg: message: parsing normal part > >[7722] dbg: message: added part, type: text/plain > >[7722] dbg: message: ---- MIME PARSER END ---- > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_toks > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_seen > >[7722] dbg: bayes: found bayes db version 3 > >[7722] dbg: bayes: DB journal sync: last sync: 0 > >[7722] dbg: bayes: not available for scanning, only 146 ham(s) in bayes DB < >200 > >[7722] dbg: bayes: untie-ing > >[7722] dbg: bayes: untie-ing db_toks > >[7722] dbg: bayes: untie-ing db_seen > >[7722] dbg: dns: name server: 84.200.241.2, family: 2, ipv6: 0 > >[7722] dbg: dns: testing resolver nameservers: 84.200.241.2 > >[7722] dbg: dns: trying (3) cingular.com... > >[7722] dbg: dns: looking up NS for 'cingular.com' > >[7722] dbg: dns: NS lookup of cingular.com using 84.200.241.2 succeeded => >DNS available (set dns_available to override) > >[7722] dbg: dns: is DNS available? 1 > >[7722] dbg: metadata: X-Spam-Relays-Trusted: > >[7722] dbg: metadata: X-Spam-Relays-Untrusted: > >[7722] dbg: metadata: X-Spam-Relays-Internal: > >[7722] dbg: metadata: X-Spam-Relays-External: > >[7722] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0x8f2bd5c) >implements 'extract_metadata' > >[7722] dbg: message: no encoding detected > >[7722] dbg: textcat: classifying, skipping: yi sco lv is bs sl la ga sa eu >et rm cy eo fy gd lt > >[7722] dbg: textcat: language possibly: en > >[7722] dbg: textcat: X-Languages: "en", X-Languages-Length: 1342 > >[7722] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-lastexternal > >[7722] dbg: dns: checking RBL sa-accredit.habeas.com., set >habeas-firsttrusted > >[7722] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl > >[7722] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted > >[7722] dbg: dns: checking RBL combined.njabl.org., set njabl-lastexternal > >[7722] dbg: dns: checking RBL combined.njabl.org., set njabl > >[7722] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., >set whois > >[7722] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal > >[7722] dbg: dns: checking RBL bl.spamcop.net., set spamcop > >[7722] dbg: dns: checking RBL sa-trusted.bondedsender.org., set >bsp-firsttrusted > >[7722] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., >set whois-lastexternal > >[7722] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal > >[7722] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs > >[7722] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted > >[7722] dbg: check: running tests for priority: 0 > >[7722] dbg: rules: running header regexp tests; score so far=0 > >[7722] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<" > >[7722] dbg: rules: ran header rule __SANE_MSGID ======> got hit: >"<[EMAIL PROTECTED]> > >[7722] dbg: rules: " > >[7722] dbg: rules: ran header rule NO_REAL_NAME ======> got hit: >"[EMAIL PROTECTED] > >[7722] dbg: rules: " > >[7722] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit: >"@lint_rules>" > >[7722] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit: >"1156840832" > >[7722] dbg: eval: all '*From' addrs: [EMAIL PROTECTED] > >[7722] dbg: plugin: registering glue method for check_subject_in_blacklist >(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9176dcc)) > >[7722] dbg: eval: all '*To' addrs: > >[7722] dbg: rules: ran eval rule NO_RELAYS ======> got hit > >[7722] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit > >[7722] dbg: plugin: registering glue method for check_subject_in_whitelist >(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9176dcc)) > >[7722] dbg: rules: ran eval rule MISSING_HEADERS ======> got hit > >[7722] dbg: rules: running body-text per-line regexp tests; score so >far=0.738 > >[7722] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I" > >[7722] dbg: uri: running uri tests; score so far=0.738 > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_toks > >[7722] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_seen > >[7722] dbg: bayes: found bayes db version 3 > >[7722] dbg: bayes: DB journal sync: last sync: 0 > >[7722] dbg: bayes: not available for scanning, only 146 ham(s) in bayes DB < >200 > >[7722] dbg: bayes: not scoring message, returning undef > >[7722] dbg: bayes: DB journal sync: last sync: 0 > >[7722] dbg: bayes: untie-ing > >[7722] dbg: bayes: untie-ing db_toks > >[7722] dbg: bayes: untie-ing db_seen > >[7722] dbg: plugin: registering glue method for check_language >(Mail::SpamAssassin::Plugin::TextCat=HASH(0x8f2bd5c)) > >[7722] dbg: rules: ran eval rule UNWANTED_LANGUAGE_BODY ======> got hit > >[7722] dbg: plugin: registering glue method for check_microsoft_executable >(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0x8ecf374)) > >[7722] dbg: plugin: registering glue method for check_suspect_name >(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0x8ecf374)) > >[7722] dbg: plugin: registering glue method for check_body_8bits >(Mail::SpamAssassin::Plugin::TextCat=HASH(0x8f2bd5c)) > >[7722] dbg: rules: running raw-body-text per-line regexp tests; score so >far=3.538 > >[7722] dbg: rules: running full-text regexp tests; score so far=3.538 > >[7722] dbg: plugin: registering glue method for check_razor2_range >(Mail::SpamAssassin::Plugin::Razor2=HASH(0x8ee3310)) > >[7722] dbg: plugin: registering glue method for check_razor2 >(Mail::SpamAssassin::Plugin::Razor2=HASH(0x8ee3310)) > >[7722] dbg: plugin: registering glue method for check_pyzor >(Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e9cf1c)) > >[7722] dbg: util: current PATH is: /sbin:/bin:/usr/sbin:/usr/bin > >[7722] dbg: pyzor: pyzor is not available: no pyzor executable found > >[7722] dbg: pyzor: no pyzor found, disabling Pyzor > >[7722] dbg: plugin: registering glue method for check_dcc >(Mail::SpamAssassin::Plugin::DCC=HASH(0x8ec6284)) > >[7722] dbg: dcc: dccifd is not available: no r/w dccifd socket found > >[7722] dbg: dcc: dccproc is not available: no dccproc executable found > >[7722] dbg: dcc: dccifd and dccproc are not available, disabling DCC > >[7722] dbg: rules: no method found for eval test check_clamav > >[7722] warn: rules: failed to run CLAMAV test, skipping: > >[7722] warn: (Can't locate object method "check_clamav" via package >"Mail::SpamAssassin::PerMsgStatus" at >/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line >2614. > >[7722] warn: ) > >[7722] dbg: check: running tests for priority: 500 > >[7722] dbg: rules: running meta tests; score so far=3.538 > >[7722] dbg: rules: running header regexp tests; score so far=5.016 > >[7722] dbg: rules: running body-text per-line regexp tests; score so >far=5.016 > >[7722] dbg: uri: running uri tests; score so far=5.016 > >[7722] dbg: rules: running raw-body-text per-line regexp tests; score so >far=5.016 > >[7722] dbg: rules: running full-text regexp tests; score so far=5.016 > >[7722] dbg: check: running tests for priority: 1000 > >[7722] dbg: rules: running meta tests; score so far=5.016 > >[7722] dbg: rules: running header regexp tests; score so far=5.016 > >[7722] dbg: plugin: registering glue method for check_from_in_auto_whitelist >(Mail::SpamAssassin::Plugin::AWL=HASH(0x8ed1d2c)) > >[7722] dbg: config: using "/root/.spamassassin" for user state dir > >[7722] dbg: locker: safe_lock: created >/root/.spamassassin/auto-whitelist.lock.TSwebserver.tecserver.at.7722 > >[7722] dbg: locker: safe_lock: trying to get lock on >/root/.spamassassin/auto-whitelist with 0 retries > >[7722] dbg: locker: safe_lock: link to >/root/.spamassassin/auto-whitelist.lock: link ok > >[7722] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in >/root/.spamassassin/auto-whitelist > >[7722] dbg: auto-whitelist: db-based >[EMAIL PROTECTED]|ip=none scores 0/0 > >[7722] dbg: auto-whitelist: AWL active, pre-score: 5.016, autolearn score: >5.016, mean: undef, IP: undef > >[7722] dbg: auto-whitelist: DB addr list: untie-ing and unlocking > >[7722] dbg: auto-whitelist: DB addr list: file locked, breaking lock > >[7722] dbg: locker: safe_unlock: unlink >/root/.spamassassin/auto-whitelist.lock > >[7722] dbg: auto-whitelist: post auto-whitelist score: 5.016 > >[7722] dbg: rules: running body-text per-line regexp tests; score so >far=5.016 > >[7722] dbg: uri: running uri tests; score so far=5.016 > >[7722] dbg: rules: running raw-body-text per-line regexp tests; score so >far=5.016 > >[7722] dbg: rules: running full-text regexp tests; score so far=5.016 > >[7722] dbg: check: is spam? score=5.016 required=5 > >[7722] dbg: check: >tests=MISSING_HEADERS,MISSING_SUBJECT,NO_REAL_NAME,NO_RECEIVED,NO_RELAYS,TO_ >CC_NONE,UNWANTED_LANGUAGE_BODY > >[7722] dbg: check: >subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SAN >E_MSGID,__UNUSABLE_MSGID > >[7722] warn: lint: 2 issues detected, please rerun with debug enabled for >more information > > > >do you have any ideas how to fix that? would want to use clamav to check for >viruses > > > >Mit freundlichen Grüßen > >Jürgen Ladstätter ( [EMAIL PROTECTED] ) > >_______________________________________________ > >P.I.C.S. EDV GmbH. >A-5020 Salzburg, Landsturmstraße 18 >Tel.: +43 (662) 455467 >Fax.: +43 (662) 455468 > >Web: <http://www.pics.co.at/> http://www.pics.co.at >E-Mail: [EMAIL PROTECTED] >Ihr Partner für Internet, Computer und Software >_______________________________________________ > > It's up to your MTA to decide what to do with the mail once SA or CLAM have flagged it. In itself CLAM is just an AV scanner the same way SA is 'just' a spam scanner. Once a mail has been flagged as spam or virus your MTA should take over from there and decide whether to drop the mail, deliver it with warning or some other action. We use CLAM inline here but it only returns whether a message is clean or not, depending on that the MTA delivers it or dumps it into the virus holding directory on the mail server. HTH Nigel
