installed amavis 2.7.1 on gentoo. problem detecting eicar files.

[Mark Martinec]

Marko,

> on console all oke, clamscan detects eicar.zip as testfile

Good.

 >> Rise the log level and see how decoding, and file type
 >> detection goes

> in amavis log i find this:
>
> Jul  4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd)
> result: /var/amavis/tmp/amavis-20120704T174152-01362-FZFRqVwJ/parts: OK\n
> Jul  4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd): CLEAN
> Jul  4 17:41:53 mail amavis[1362]: (01362-01) run_av (ClamAV-clamd)
> result: clean

You omitted the part od the log that shows how decoding and file(1)
utility is doing.

 > is it correct that it pass? as u said its a test filen and
 > not a virus.

No, this is not correct. Either a test mail message did not
contain a clean copy of eicar in body, or there was a problem
in parsing or decoding of a message. Double-check your test
message for proper MIME structure, and show the full log.

   Mark