[Clamav-devel] 0.98.5-rc1 milter feedback

Michael G. Janicki m.g.j.janicki at gmail.com
Thu Oct 16 22:29:33 EDT 2014



On 10/16/2014 07:00 PM, Shawn Webb wrote:
> Anytime. I'll investigate further tomorrow. Do you have any steps for
> reproduction?

Hmm reproduction is that it just happens.  But, here's how I'm running
things.  clamav-0.98.5-rc1 running as daemon.  Postfix 2.11.2 running as
daemon and clamav using clamav-milter to communicate with Postfix via
Unix socket.  (clamav-milter.conf below).  clamav-milter is not SUID.
It manages to work with Postfix by being a member of the group which
can accessthe necessary Postfix files.  I've had it working this way
for about a year now so I don't think there's anything too strange
about the setup.

No major changes in the configuration of either ClamAV or Postfix have
been made recently.  At one point messages were correctly marked with
X-Virus-Scanned and X-Virus-Status as dictated by the
"AddHeader Replace" directive in clamav-milter.conf.  At some point
during the beta development cycle, the headers just stopped being placed
into messages.  Sorry I can't be more specific as to when it began, but
I know it was apparent in 20140905.

Thanks again, Shawn.

-- Mike

clamav-milter.conf
------------------
MilterSocket unix:/var/run/clamav/clamav-milter.socket
MilterSocketGroup postfix
MilterSocketMode 660
FixStaleSocket yes
User clamav
AllowSupplementaryGroups yes
ReadTimeout 120
Foreground no
PidFile /var/run/clamav/clamav-milter.pid
TemporaryDirectory /tmp
ClamdSocket unix:/var/run/clamav/clamd.socket
MaxFileSize 10M
OnClean Accept
OnInfected Quarantine
OnFail Defer
AddHeader Replace
LogFile /var/log/clamav/clamav-milter.log
LogFileMaxSize 2M
LogTime yes
LogSyslog yes
LogFacility LOG_LOCAL6
LogVerbose yes
LogRotate yes
LogInfected Full
LogClean Off
SupportMultipleRecipients yes


More information about the clamav-devel mailing list