[Rspamd-Users] rspamd 1.79 and clamav

[Markus Rosjat]

Hi all,

i try to use clamav with rspamd and put the antivirus.conf in override.d 
with following content:

clamav {
     attachments_only = false;
     symbol = "CLAM_VIRUS";
     type = "clamav";
     action = "reject";
     servers = "/var/run/clamav/clamd.socket";
     patterns {
        JUST_EICAR = '^Eicar-Test-Signature$';
     }
    whitelist = "/etc/rspamd/white/antivirus.map";
}

when I do a test with a  eicar sig the mail gets rejected and I see it 
ust the JUST_EICAR pattern.
But if I actually try to a deliver a mail with a doc that is clearly not 
clean it seems rspamd doesnt seem to care.
So question is do I need to add more patterns or is there something I 
miss in general?

regards

-- 
Markus Rosjat    fon: +49 351 8107224    mail: rosjat at ghweb.de

G+H Webservice GbR Gorzolla, Herrmann
Königsbrücker Str. 70, 01099 Dresden

http://www.ghweb.de
fon: +49 351 8107220   fax: +49 351 8107227

Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about your responsibility and commitment to the ENVIRONMENT