clamav check error

[kentur]

Yo, i tried the eicar tests.
And files are straightly delivered to mailbox, without getting stuck in clamav tests.

in zip files.

• Sending eicarpasswd.zip... 1 OK!
• Sending eicarpasswdocr.zip... 1 OK!

Both of which are delivered. I would imagine this is because the files are zipped with password?

I don't see clamav even called. (perhaps it doesn't log unless using debug?)

 

[kentur]

So it seems it should add it to quarantine, though Q is empty for us, since server install ~3-6 months ago. Seemingly no viruses are sent anymore?

 

[kentur]

To clarify, this happens with non-password protected files also.
Mail log shows SPAM check, but not clamav. Though it might be silent as pmg calls it outside?

 

[dcsapak]

can you post the mail log of such a file? (best the whole timeframe from the journal) maybe we can see what's wrong here
encrypted zips should get a 'heuristics' match from clamav, but ofc it cannot detect the virus itself (since it cannot open the zip)

unencrypted files should match though