Exiscan & ClamAV

[hci]

Has anyone got ClamAV to work with Exiscan on there Directadmin box? I have been fighting with it for two days now. I think it is a permission issue.

What I have done so far based on:
http://www.timj.co.uk/linux/exim.php

Installed ClamAV from rpm.

Added to Exim.conf:

av_scanner = clamd:127.0.0.1 3310

In the "check_message:" section.

# ACL that is used after the DATA command
check_message:
# Virus Check
deny message = This message contains malware($malware_name)
demime = *
malware = *
accept

In theory that should be about all it takes. Refuses all email though with an error. So I modified clamd.conf and commented out.

#User clamav

Now messages go through but it does not catch viruses. I have tweaked with countless settings now in both clamd.conf and exim.conf with no real success. I am sure its some simple thing.

I think this might have something to do with it.

When you install the RPM, an unprivileged user 'clamav' will be created, which is the user that we will set
ClamAV up to run as. You will need to add 'clamav' as an additional user in the 'mailnull' group or whichever
group Exim runs as, in /etc/group.

Matthew

 

[hci]

I think I got this going. Might post something in how too shortly. Directadmin is blocking viruses!

Matthew