clamd rejecting attachments

[vinayanbenedict]

hi,

I am having problem sending mail with attachments.
I have exim + spamassassin + clam.

When I am trying to send mail with an attachment say, 3 MB , it got rejected with error

2008-02-13 10:10:27 1JPDat-00035u-MJ malware acl condition: clamd: unable to read from socket (Connection timed out)
2008-02-13 10:10:27 H=66-340-230-233.test.car.com (PC264411574023) [66.340.230.233] F=<[email protected]> rejected RCPT <[email protected]>

my exim malware section is;

# ACL that is used after the DATA command
check_message:
deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (.$found_extension)
demime = bat:comifrf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
accept

Please help me...

Thanks
V9

 

[GXX]

hi,

I am having problem sending mail with attachments.
I have exim + spamassassin + clam.

When I am trying to send mail with an attachment say, 3 MB , it got rejected with error

2008-02-13 10:10:27 1JPDat-00035u-MJ malware acl condition: clamd: unable to read from socket (Connection timed out)
2008-02-13 10:10:27 H=66-340-230-233.test.car.com (PC264411574023) [66.340.230.233] F=<[email protected]> rejected RCPT <[email protected]>

my exim malware section is;

# ACL that is used after the DATA command
check_message:
deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (.$found_extension)
demime = bat:comifrf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
accept

Please help me...

Thanks
V9

Is clamd even running?

ps aux | grep clamd

 

[vinayanbenedict]

clam rejecting

Hi,

Ofcourse, clamd is running...

Thanks
V9

 

[andyreed]

When I am trying to send mail with an attachment say, 3 MB , it got rejected with error

2008-02-13 10:10:27 1JPDat-00035u-MJ malware acl condition: clamd: unable to read from socket (Connection timed out)

I suggest you re-configte /etc/clamd.conf file. Look for and activate/modify two variables:
StreamMaxLength and ReadTimeout
increase the value for these two variables, restart clamd and see if that helps.