[Rspamd-Users] rspamd 1.79 and clamav

[Markus Rosjat]

Hi again,

Am 14.11.2018 um 12:30 schrieb Markus Rosjat:
> Hi all,
>
> i try to use clamav with rspamd and put the antivirus.conf in 
> override.d with following content:
>
> clamav {
>     attachments_only = false;
>     symbol = "CLAM_VIRUS";
>     type = "clamav";
>     action = "reject";
>     servers = "/var/run/clamav/clamd.socket";
>     patterns {
>        JUST_EICAR = '^Eicar-Test-Signature$';
>     }
>    whitelist = "/etc/rspamd/white/antivirus.map";
> }
>
> when I do a test with a  eicar sig the mail gets rejected and I see it 
> ust the JUST_EICAR pattern.
> But if I actually try to a deliver a mail with a doc that is clearly 
> not clean it seems rspamd doesnt seem to care.
> So question is do I need to add more patterns or is there something I 
> miss in general?
>
> regards
>

it seems after I also installed sanesecurity sigs clamav is doing its 
work at least I can see some results in the logs

regards

-- 
Markus Rosjat    fon: +49 351 8107224    mail: rosjat at ghweb.de

G+H Webservice GbR Gorzolla, Herrmann
Königsbrücker Str. 70, 01099 Dresden

http://www.ghweb.de
fon: +49 351 8107220   fax: +49 351 8107227

Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about your responsibility and commitment to the ENVIRONMENT