Email never sent to ClamAV server

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
skryabin
New user
New user
Posts: 4
Joined: 2008-01-31 16:28

Email never sent to ClamAV server

Post by skryabin » 2019-09-26 16:17

Hello,

I have the latest version of hMailServer running on a Windows 2012 Server VM (ESXi host), and ClamAV (daemon) running on a Debian 10 VM. Both VM's are on the same LAN and run on the same ESXi host. They ping each other. I also have spamassassin running on that Debian VM.

When I click on the "Test..." button, hmailserver reports a success and I can see in the clamav logs that clamav-daemon has received the test email (see attached screenshots). The 3310 port is accessible to hmailserver.

But when I do a real test, for example from a Yahoo account, with a real .doc attachment that contains a known virus (confirmed by running clamscan on the Debian VM, with that same file), the email goes through the blacklists, then spamassassin, but never gets sent to clamAV (see attached hmailserver log screenshot).

Does anyone know why this could happen?

Thanks!

Alexandre
Attachments
Screen Shot 2019-09-26 at 6.21.03 AM.png
Screen Shot 2019-09-26 at 10.12.54 AM.png
Screen Shot 2019-09-26 at 10.13.59 AM.png

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: Email never sent to ClamAV server

Post by jimimaseye » 2019-09-26 17:10

So you have antivirus enabled on the ip range?

run this and post the results: https://www.hmailserver.com/forum/viewt ... 20&t=30914

[Entered by mobile. Excuse my spelling.]
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

skryabin
New user
New user
Posts: 4
Joined: 2008-01-31 16:28

Re: Email never sent to ClamAV server

Post by skryabin » 2019-09-26 18:53

I have no antivirus installed, but I will run the script and post later today the result. If there was an antivirus that deleted my attachment, wouldn't it NOT get through to the destination address? Right now, my user receives the mail and the virus-infected attachment...

palinka
Senior user
Senior user
Posts: 1190
Joined: 2017-09-12 17:57

Re: Email never sent to ClamAV server

Post by palinka » 2019-09-26 18:58

What Jimi said was to look at your ip ranges to see if antivirus is enabled. If not, messages will not be sent to antivirus for examination. Sounds like you have it working properly (it tested positive), but you have not instructed hmailserver to actually check for viruses.

skryabin
New user
New user
Posts: 4
Joined: 2008-01-31 16:28

Re: Email never sent to ClamAV server

Post by skryabin » 2019-09-26 19:14

Aahhhhhh EUREKA !!!! I feel so silly now... Just enabled it in the Internet IP range, and it works perfectly.

THANKS SO MUCH to both of you!! :)

Have a great day,

Alexandre

Post Reply