clamav-milter notify problem

[Simone Marchioni]

Hi to all!

I installed clamav-milter from EPEL repository on a CentOS 4.6 i386
machine.
It work well but when I send a mail with a fake virus to test, it
correctly detect the virus but it can't send a notify to the sender.
If the mail doesn't have a Virus, the mail goes correctly in recipient's
mailbox with the headers:

X-Virus-Scanned: ClamAV version 0.92, clamav-milter version 0.92 on ...
X-Virus-Status: Clean

As stated in the man:

"When clamav-milter processes an e-mail which contains a virus it
rejects the e-mail by using the SMTP code 550 or 554"

In the file /var/log/clamd.milter I find the following message:

/tmp/clamav-b7554818de2dc90f29d8c5ac67c1a847/msg.AaV6tb:
Eicar-Test-Signature FOUND
m092Ns53003533: /tmp/clamav-b7554818de2dc90f29d8c5ac67c1a847/msg.AaV6tb:
Eicar-Test-Signature Intercepted virus from <sender> to <recipient>
sh: no: command not found
m092Ns53003533: Failed to notify clamAV interception - see dead.letter

I tried to disable SELinux but anything changed.

Any tips?

Thanks in advance
Simo

[Kevin Fenzi]

On Wed, 09 Jan 2008 12:36:57 +0100
[e-mail] (Simone Marchioni) wrote:
> Hi to all!
>
> I installed clamav-milter from EPEL repository on a CentOS 4.6 i386
> machine.
> It work well but when I send a mail with a fake virus to test, it
> correctly detect the virus but it can't send a notify to the sender.
> If the mail doesn't have a Virus, the mail goes correctly in
> recipient's mailbox with the headers:
>
> X-Virus-Scanned: ClamAV version 0.92, clamav-milter version 0.92
> on ... X-Virus-Status: Clean
>
> As stated in the man:
>
> "When clamav-milter processes an e-mail which contains a virus it
> rejects the e-mail by using the SMTP code 550 or 554"
>
> In the file /var/log/clamd.milter I find the following message:
>
> /tmp/clamav-b7554818de2dc90f29d8c5ac67c1a847/msg.AaV6tb:
> Eicar-Test-Signature FOUND
> m092Ns53003533: /tmp/clamav-b7554818de2dc90f29d8c5ac67c1a847/msg.AaV6tb:
> Eicar-Test-Signature Intercepted virus from <sender> to <recipient>
> sh: no: command not found
> m092Ns53003533: Failed to notify clamAV interception - see dead.letter
>
> I tried to disable SELinux but anything changed.
>
> Any tips?

Not sure off hand... file a bug?

You do have the milter running I assume?
Also, have you edited the /etc/clamd.d/milter.conf and commented the
stupid "Example" line?
> Thanks in advance
> Simo

kevin