virus scan is NOT working

[thisisit3]

On one of my servers, virus scanning of incoming emails isn't working for some reason.

I tested this by sending several viruses to some of my email addresses and i received the viruses, which means that either the virus scanner wasn't run or if it was then Exim didn't delete the email.

I tested ClamAV on the server (version 0.90.2) via command line and it found ALL the viruses, so clamav is working fine and it contains the signatures for the viruses that i'm sending.

Anyone else noticed such a problem?

[thisisit3]

problem solved!

apparently, after installing clamvconnector from the cPanel Addons (gives your users a virus scan option in their cPanels), it disabled virus scanning by overwritting my exim.conf with an older version.

for future use, if you want to check if your Exim is setup right, then do:

grep av_scanner /etc/exim.conf

and:

grep malware /etc/exim.conf

if both commands return results, then you are set ok!

[thisisit3]

In case you'd like to test if virus scanning works, just email this string to yourself:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

(its the famous Eicar signature, recognized by all av scanners)

[Ron]

LOL I was wondering if the virus scanner would report you as a compromised machine...

[thisisit3]

I believe that feature is not enabled by default