exim + clamav don't scan mail

rococo

New member
Joined
Mar 23, 2018
Messages
4
Hi

Shortly: exim don't pass mail to clamav.

I install clamav following with this how-to https://help.directadmin.com/item.php?id=370

After litle investigation I don't see any packet from exim to port 127.0.0.1:3310.

grep clam exim*.conf
exim.clamav.load.conf:av_scanner = clamd:127.0.0.1 3310
exim.conf:# av_scanner = clamd:/var/run/clamav/clamd
exim.conf: .include_if_exists /etc/exim.clamav.load.conf
exim.conf: .include_if_exists /etc/exim.clamav.conf

cat /etc/exim.clamav.load.conf
#1.1
av_scanner = clamd:127.0.0.1 3310

SKIP_AV_DOMAINS = /etc/virtual/skip_av_domains

cat /etc/exim.clamav.load.conf
#1.1
av_scanner = clamd:127.0.0.1 3310

SKIP_AV_DOMAINS = /etc/virtual/skip_av_domains
[root@s2 etc]# cat /etc/exim.clamav.conf
#1.3
#MUST BE THE LAST .include_if_exists in acl_check_message as it adds an extra ACL at the end.

accept
condition = ${if forany{<, $recipients}{eq{${acl{skip_av_recipient_domain}{$item}}}{caught}}}
logwrite = Skipped AV scan because of skip_av_domains

deny
message = This message contains a virus or other harmful content ($malware_name)
malware = */defer_ok/tmo=10s
log_message = Message from $sender_host_address denied - virus of harmful content ($malware_name)

warn
message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

accept

skip_av_recipient_domain:
warn
set acl_m_av_domain = ${extract{2}{@}{$acl_arg1}}

accept
condition = ${if exists{SKIP_AV_DOMAINS}}
condition = ${lookup{$acl_m_av_domain}lsearch{SKIP_AV_DOMAINS}{1}{0}}
message = caught

accept

exim -bP |grep av
av_scanner = clamd:127.0.0.1 3310

Please hint
 
Back
Top