Fw: [vps-mail] Re: Clamav

["Dale Britt" <dbritt@xxxxxxxxxxxxxxx>]

Hi Scott

It looks like the log file thinks that there is never a virus coming
through.

Here is the log on it

Thanks
Dale


procmail: [87623] Tue Mar  9 17:40:01 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [87623] Tue Mar  9 17:40:02 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [87758] Tue Mar  9 17:40:21 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [88268] Tue Mar  9 17:41:25 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [88268] Tue Mar  9 17:41:26 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [88923] Tue Mar  9 17:44:50 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [88923] Tue Mar  9 17:44:51 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [89032] Tue Mar  9 17:45:13 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [89454] Tue Mar  9 17:46:04 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [89660] Tue Mar  9 17:46:34 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [90841] Tue Mar  9 17:52:00 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [90858] Tue Mar  9 17:52:07 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [90858] Tue Mar  9 17:52:08 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [91517] Tue Mar  9 17:54:52 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [91529] Tue Mar  9 17:54:53 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [91529] Tue Mar  9 17:54:54 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [94710] Tue Mar  9 18:00:43 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [94710] Tue Mar  9 18:00:44 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
procmail: [94981] Tue Mar  9 18:00:57 2004
procmail: Assigning "NL=
"
procmail: Assigning "CLAMAV="
procmail: Executing
"/usr/local/bin/clamscan,--disable-summary,--stdout,--mbox,-"
procmail: [94981] Tue Mar  9 18:00:58 2004
procmail: No match on ".*: \/.* FOUND"
procmail: Executing "formail,-aX-ClamAV: clean"
procmail: Assigning "MATCH="
procmail: Matched "clean"
procmail: Match on "^X-ClamAV: \/.*"
procmail: No match on ! "^^clean^^"
procmail: Skipped "-I"Subject: VIRUS FOUND (was: $SUBJECT)"; \"
procmail: Skipped "/usr/local/etc/virus_message.txt;) | $SENDMAIL -t"
procmail: Assigning "LOGFILE="
procmail: Opening "/dev/null"
----- Original Message ----- 
From: "Dale Britt" <dbritt@xxxxxxxxxxxxxxx>
To: <vps-mail@xxxxxxxxxxxx>
Sent: Tuesday, March 09, 2004 8:22 AM
Subject: Re: [vps-mail] Re: Clamav


> Hi Scott
>
> We tried to implement your suggestion below and the virus_message.txt
> message wasn't sent
>
> Any suggestions?
>
> Thanks
> Dale
>
>
> ----- Original Message ----- 
> From: "Scott Wiersdorf" <scottw@xxxxxxxxxxxx>
> To: <vps-mail@xxxxxxxxxxxx>
> Sent: Tuesday, March 02, 2004 12:48 PM
> Subject: Re: [vps-mail] Re: Clamav
>
>
> > On Tue, Mar 02, 2004 at 11:51:48AM -0800, Dale Britt wrote:
> > > Hi
> > >
> > > Is there a way to have an email sent to the recipient notifying them
the
> clamav caught a virus
> > >
> > > What do I have to do for this to happen?
> >
> > You can modify your /usr/local/etc/procmailrc (assuming this is VPS
> > v2):
> >
> > :0
> > * ^X-ClamAV: \/.*
> > * ! MATCH ?? ^^clean^^
> > {
> >   DROPPRIVS=yes
> >
> >   ## this is slightly modified with a 'c' flag
> >   :0c:
> >   $HOME/quarantine
> >
> >   ## send notification to recipient
> >   SUBJECT=`formail -zxSubject:`
> >   :0 h
> >   | (formail -i"From: Virus Scanner <root@xxxxxxxxxx>" \
> >     -I"Subject: VIRUS FOUND (was: $SUBJECT)"; \
> >     cat /usr/local/etc/virus_message.txt;) | $SENDMAIL -t
> >   ## end notification section
> > }
> >
> > and make a file '/usr/local/etc/virus_message.txt':
> >
> >     A virus was sent to you but was intercepted by the server virus
> >     scanning subsystem. The infected message was saved in the
> >     <<quarantine>> folder in your server account home directory.
> >
> >     Do not reply to this message.
> >
> > Scott
> > -- 
> > Scott Wiersdorf
> > scottw@xxxxxxxxxxxx
> > ======================================================================
> > This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
> > Before posting a question, please search the archives (see above URL).
>

======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).