Topic: RAV Anti-virus

[Alex Schaft]

Hi,

I installed RAV anti-virus, and it's scaning all mail coming in and going out per the mail logs. I did a test with the test file from eicar.com, and it says the file is ok. Has anybody else had this?

[guestFF]

Dit you edit the config file with the correct parameters?

It's at /usr/local/rav8/etc/ravmd.conf

RequestedDeletion

[Alex Schaft]

Yes,

The mail log shows the as getting scanned, and passing

[Alex Schaft]

Yes,

The mail log shows the as getting scanned, and passing

[Allen Rapini]

I just installed the other day, and also tested with eicar. It caught eicar as well as a friendly sample of sircam32 which simeone was nice enough to send me...

Check that your domain listing is for both:
yourdomain.xxx
e-smith.yourdomain.xxx

It seems to be a peculiarity of the internal routing, and it doesn't treat the re-routed email the same as external mail.

If all else fails, post a portion of /var/log/maillog that has been stripped of sensitive info..

[sidney]

Good Morning,
    I am running 4.1.2 server what version of rav do I install
"qmail" or "sendmail". sorry for being off the topic.






thanks

[Darrell May]

sidney wrote:
>
> Good Morning,
>     I am running 4.1.2 server what version of rav do I install
> "qmail" or "sendmail". sorry for being off the topic.

Visit my HowTo for details, download and online registration.

http://netsourced.com/servers/docs/rav-howto.html

I've also just created a separate HowTo for scanning all server files:

http://netsourced.com/servers/docs/ravscan-howto.html

Regards,

Darrell

[Hsing-Foo]

Hi Darrell,

I followed your how-to's. With the Ravscan script i get the following message delivered:
---------------------------
/etc/cron.daily/ravscan:

/etc/cron.daily/ravscan: line 17: 10347 Segmentation fault      /usr/local/rav8/bin/ravav / -RP /usr/local/rav8/rave -ALL -CLEAN -HEUR ON -SMART -UNZIP -MAIL -QRT /var/spool/rav/quarantine -REPORT /root/ravscan.rpt >/dev/null 2>&1
Null message body; hope that's ok
------------------------

and I got a core dump.

Any suggestions on what's wrong?

Thanks,

RequestedDeletion