On 4/15/05, Paul Howarth <paul@xxxxxxxxxxxx> wrote: > Bob Brennan wrote: > > <snipped resolved info> > > > >>>* added INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav-milter/clamav.sock,F=,T=S:4m;R:4m')dnl > >>>to sendmail.mc > >> > >>Let me ask: where exactly did you add this milter line? > > > > > > at the very bottom > > That's likely to be the problem. It should certainly be above any MAILER > lines and probably above any DAEMON_OPTIONS lines too. > > Try moving the INPUT_MAIL_FILTER nearer to the top of the file and see > if that helps. I have placed it above DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl and MAILER(smtp)dnl MAILER(procmail)dnl rebuilt sendmail.cf and restarted sendmail, no errors in maillog Sent myself a clean email from gmail and got X-Virus-Scanned: clamd / ClamAV version 0.71, clamav-milter version 0.71 X-Virus-Status: Clean in the header (same as before) Sent myself clean and dirty emails from within the server, no clamav headers. I think that is a matter of expectation-alignment, probably mail that does not come in from the outside world is not being clamaved. So I guess I will have to wait for a real virus, I doubt gmail would appreciate me being a virus mailer even if it is only to myself. So I guess 2 questions remain: 1. How do I know if viruses are indeed been blocked? (can't find an appropriate log file) 2. How do I know my definitions are being kept up-to-date with no apparent freshclam?