Hello
First let me report, that Squid, HAVP and ClamAV seem to work fine.
There is only a problem with ClamAV. In the config file clamd.conf there are some lines saying:
# Execute a command when virus is found. In the command string %v will
# be replaced by a virus name.
# Default: disabled
#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"
So I configured:
VirusEvent echo "%v" | /bin/mail -s "VIRUS ALERT Proxy1: %v" user@domain.de
Unfortunately this does not work at all. Pointing my browser to the eicar test files HAVP reports the virus, it is logged to havp.log. But a mail is never sent out. No logging to /var/log/messages, /var/log/mail, /var/log/clamd etc.
When I call the command like this (because ClamAV is running as user vscan) everthing works fine.
sudo -u vscan echo "%v" | /bin/mail -s "VIRUS ALERT Proxy1: %v" user@domain.de
I also tried some changes in clamd.conf already to check wether this file is the one ClamAV really uses. But ClamAV is just doing nothing at all. Same result as if I comment this line out.
Any ideas ?
Thanks & Regards,
Alexander
