Try sending the test virus from an account not in your domain (hotmail,etc).
Bill Wesson
************************
That works I can download a virus from there the .zip format and send
it and clamav catches it but what is strange is that I have not caught
any virii on my email gateway other than the test virii so clam must
be working since it catches the eicar and it reports that in mail.log
but I usually get many other virii every other day usually 100 a day
and now just my eicar?
Jim
On Mon, 7 Mar 2005 14:20:43 -0700, Bill Wesson <
plug@thenoc.com> wrote:
> One test is to send a test virus through.
> See http://www.eicar.org/anti_virus_test_file.htm
> You may know this is not a real virus. It is a test virus recognized by
most
> anti-virus scanners as a virus.
>
> Be sure all the correct daemons are running too.
>
> --Bill Wesson
>
> **********************************
>
> I have a email gateway running postfix, andd clamav as of last week
> mail.log stopped reporting virii to amavis-stats or mailgraph.
>
> mailgraph and amavis-stats are not reporting any virii so I am not
> sure if clamav is working, I have been looking at my logs and
> everything seems to be working fine, but I what is the best to
> confirm that clamav is going to pickup the virii that are coming to
> our email gateway.
>
> here is a tail from clam.log
>
> tail -f /var/log/clamav/clamav.log
> Mon Mar 7 09:57:04 2005 -> HTML support enabled.
> Mon Mar 7 09:57:04 2005 -> Self checking every 1200 seconds.
> Mon Mar 7 09:57:13 2005 -> Reading databases from /var/lib/clamav/
> Mon Mar 7 09:57:14 2005 -> Database correctly reloaded (31476 viruses)
> Mon Mar 7 10:06:18 2005 ->
> /var/lib/amavis/amavis-20050307T095802-00704/parts/part-00002:
> Worm.SomeFool.Gen-1 FOUND
> Mon Mar 7 10:17:59 2005 -> SelfCheck: Database status OK.
> Mon Mar 7 10:38:27 2005 -> SelfCheck: Database status OK.
> Mon Mar 7 10:58:32 2005 -> SelfCheck: Database status OK.
> Mon Mar 7 11:18:40 2005 -> SelfCheck: Database status OK.
> Mon Mar 7 11:38:50 2005 -> SelfCheck: Database status OK.
>
> Jim
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)