<html><head><style id="pgp_css" type="text/css"><!----></style><style type="text/css">#x33309136fe8b4a21bfadb47aa4704b48 p{
white-space:pre-wrap;
}<!--#x05849af8179043c p
{white-space: pre-wrap;}
--></style><style id="css_styles" type="text/css"><!--blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: center; '], li[style='text-align: right;'], li[style='text-align: right; '] { list-style-position: inside;}
body { font-family: Segoe UI; font-size: 12pt; }
.quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb solid; padding-left: 0.3em; }--></style></head><body><div>Hi, in die local.d files nur den Inhalt des Modules, ergo</div><div><br /></div><div><span style="background-color: rgba(0, 0, 0, 0); font-family: monospace; font-size: 12pt;">clamav { </span></div><div><div id="x33309136fe8b4a21bfadb47aa4704b48"><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> action = "reject"; </span><br style="background-color:rgba(0,0,0,0);font-family:monospace;" /><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> message = '${SCANNER}: virus found: "${VIRUS}"'; </span><br style="background-color:rgba(0,0,0,0);font-family:monospace;" /><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> symbol = "CLAM_VIRUS"; </span><br style="background-color:rgba(0,0,0,0);font-family:monospace;" /><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> type = "clamav"; </span><br style="background-color:rgba(0,0,0,0);font-family:monospace;" /><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> servers = "127.0.0.1:3310"; </span><br style="background-color:rgba(0,0,0,0);font-family:monospace;" /><span style="background-color:rgba(0,0,0,0);font-family:monospace;"> whitelist = "/etc/rspamd/antivirus.wl";</span></div><div id="x33309136fe8b4a21bfadb47aa4704b48"><span style="background-color: rgba(0, 0, 0, 0); font-family: monospace; font-size: 12pt;">} </span></div></div>
<div><br /></div>
<div>------ Originalnachricht ------</div>
<div>Von: "Andreas" <<a href="mailto:postfix@linuxmaker.de">postfix@linuxmaker.de</a>></div>
<div>An: <a href="mailto:postfixbuch-users@listen.jpberlin.de">postfixbuch-users@listen.jpberlin.de</a></div>
<div>Gesendet: 29.03.2021 09:58:05</div>
<div>Betreff: Rspamd: Antivirus-Modul funktioniert nicht</div><div><br /></div>
<div id="x05849af8179043c" style=" font-family:'DejaVu Sans'; font-size:9pt; font-weight:400; font-style:normal;"><blockquote cite="10305491.AlGUuFgXjQ@stuttgart" type="cite" class="cite2">
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Hallo,</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">ich versuche bei Rspamd das Antivirus-Modul zu integrieren und komme nicht weiter (Postfix/Dovecot auf Debian/Buster).</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Unter /etc/rspamd/local.d liegt antivirus.conf mit</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">antivirus { </span><span style=" font-family:'monospace';"><br /> clamav { <br /> action = "reject"; <br /> message = '${SCANNER}: virus found: "${VIRUS}"'; <br /> symbol = "CLAM_VIRUS"; <br /> type = "clamav"; <br /> servers = "127.0.0.1:3310"; <br /> whitelist = "/etc/rspamd/antivirus.wl"; <br /> } <br /><br /> .include(try=true,priority=5) "${DBDIR}/dynamic/antivirus.conf" <br /> .include(try=true,priority=10) "$LOCAL_CONFDIR/override.d/antivirus.conf" <br />}<br />und folgender Befehl liefert</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; font-weight:600; color:#ff5454; background-color:#ffffff;"># </span><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;"> rspamadm configdump antivirus </span><span style=" font-family:'monospace';"><br />nested section: antivirus { antivirus { ... } }, it is likely a configuration error <br />unknown antivirus type: antivirus <br />cannot add rule: "antivirus" <br />cannot find dependency on symbol CLAM_VIRUS for symbol FORCE_ACTION_VIRUS_REJECT <br />*** Section antivirus *** <br />antivirus { <br /> clamav { <br /> action = "reject"; <br /> message = "${SCANNER}: virus found: \"${VIRUS}\""; <br /> servers = "127.0.0.1:3310"; <br /> whitelist = "/etc/rspamd/antivirus.wl"; <br /> type = "clamav"; <br /> symbol = "CLAM_VIRUS"; <br /> } <br />} <br /><br />*** End of section antivirus ***</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace';"><br />In dem Logfile </span><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">/var/log/rspamd/rspamd.log finde ich:</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">2021-03-29 09:24:53 #19614(main) lua; lua_cfg_transform.lua:498: nested section: antivirus { antivirus { ... } }, it is likely a configuration error </span><span style=" font-family:'monospace';"><br />2021-03-29 09:24:54 #19614(main) <dpkjgp>; lua; antivirus.lua:83: unknown antivirus type: antivirus <br />2021-03-29 09:24:54 #19614(main) <dpkjgp>; lua; antivirus.lua:161: cannot add rule: "antivirus"<br /><br />Ein Eicar-Test von heise.de wird ungetestet zugestellt. <br />Mir ist jetzt nicht klar, warum ich hier eine "nested section" habe, antivirus ist nur an dieser Stelle konfiguriert.<br />Warum ist der antivirus-Typ unbekannt und wo erstelle ich welche Regel "antivirus"?<br />Ich finde leider im Internet und bei rspamd.com nichts dazu.<br /><br />Beste Grüße</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace';">Andreas<br /><br /><br /></span></p></blockquote></div>
</body></html>