Amavis not Pickup Test Virus

Norman Zhang · *nix forums beginner Joined: 26 Feb 2005 Posts: 18

Hi,

I scanned a test message with clamdscan

# clamdscan *
/usr/share/doc/amavisd-new-2.2.1/test-messages/sample-virus-simple.txt:
Eicar-Test-Signature FOUND

but the mail seems to be able to go through without detection, when I
sent it on the gateway itself.

$ sendmail -i norman.zhang@test.arkonnetworks.com <sample-virus-simple.txt

/var/log/mail/info says

postfix/pickup[8530]: 22CE0C150F8: uid=0 from=<root>
postfix/cleanup[9615]: 22CE0C150F8:
message-id=<20050302232957.22CE0C150F8@mail2.gw.arkonnetworks.com>
postfix/qmgr[8531]: 22CE0C150F8: from=<root@test.arkonnetworks.com>,
size=443, nrcpt=1 (queue active)
postfix/smtp[9617]: 22CE0C150F8:
to=<norman.zhang@test.arkonnetworks.com>,
relay=207.34.136.7[207.34.136.7], delay=0, status=sent (250 Ok: queued
as 370CCC12893)
postfix/qmgr[8531]: 22CE0C150F8: removed

Is this due to Postfix trusting localhost?

Regards,
Norman Zhang

Robin Lynn Frank · *nix forums Guru Wannabe Joined: 26 Feb 2005 Posts: 128

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Norman Zhang wrote:
| Hi,
|
| I scanned a test message with clamdscan
|
| # clamdscan *
| /usr/share/doc/amavisd-new-2.2.1/test-messages/sample-virus-simple.txt:
| Eicar-Test-Signature FOUND
|
| but the mail seems to be able to go through without detection, when I
| sent it on the gateway itself.
|
| $ sendmail -i norman.zhang@test.arkonnetworks.com <sample-virus-simple.txt
|
| /var/log/mail/info says
|
| postfix/pickup[8530]: 22CE0C150F8: uid=0 from=<root>
| postfix/cleanup[9615]: 22CE0C150F8:
| message-id=<20050302232957.22CE0C150F8@mail2.gw.arkonnetworks.com>
| postfix/qmgr[8531]: 22CE0C150F8: from=<root@test.arkonnetworks.com>,
| size=443, nrcpt=1 (queue active)
| postfix/smtp[9617]: 22CE0C150F8:
| to=<norman.zhang@test.arkonnetworks.com>,
| relay=207.34.136.7[207.34.136.7], delay=0, status=sent (250 Ok: queued
| as 370CCC12893)
| postfix/qmgr[8531]: 22CE0C150F8: removed
|
| Is this due to Postfix trusting localhost?
|
| Regards,
| Norman Zhang
|
No, it is due to how you have postfix configured. Do you see anything
going to amavisd-new?

- --
Â© Robin Lynn Frank - Director of Operations - Paradigm-Omega, LLC
Website: http://www.paradigm-omega.com/
RSS: http://paradigm-omega.blogspot.com/atom.xml
Spamtraps: http://www.paradigm-omega.net/cgi-bin/custmail.cgi
====================================================================Topics never to mention to me:
Feng Shui
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Sed quis custodiet ipsos custodes?

iD8DBQFCJmk8o0pgX8xyW4YRA6ehAJ9cGr5BsN/KRVQ6zMtXi5xOnUxhFgCfdB2d
P/NTUYIPCH3x7ZwrS7vHxMg=wcn/
-----END PGP SIGNATURE-----

Google