<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd">
<html><head><meta name="qrichtext" content="1" /><style type="text/css">
p, li { white-space: pre-wrap; }
</style></head><body style=" font-family:'DejaVu Sans'; font-size:9pt; font-weight:400; font-style:normal;">
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Hallo,</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">ich versuche bei Rspamd das Antivirus-Modul zu integrieren und komme nicht weiter (Postfix/Dovecot auf Debian/Buster).</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Unter /etc/rspamd/local.d liegt antivirus.conf mit</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">antivirus { </span><span style=" font-family:'monospace';"><br /> clamav { <br /> action = "reject"; <br /> message = '${SCANNER}: virus found: "${VIRUS}"'; <br /> symbol = "CLAM_VIRUS"; <br /> type = "clamav"; <br /> servers = "127.0.0.1:3310"; <br /> whitelist = "/etc/rspamd/antivirus.wl"; <br /> } <br /><br /> .include(try=true,priority=5) "${DBDIR}/dynamic/antivirus.conf" <br /> .include(try=true,priority=10) "$LOCAL_CONFDIR/override.d/antivirus.conf" <br />}<br />und folgender Befehl liefert</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; font-weight:600; color:#ff5454; background-color:#ffffff;"># </span><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;"> rspamadm configdump antivirus </span><span style=" font-family:'monospace';"><br />nested section: antivirus { antivirus { ... } }, it is likely a configuration error <br />unknown antivirus type: antivirus <br />cannot add rule: "antivirus" <br />cannot find dependency on symbol CLAM_VIRUS for symbol FORCE_ACTION_VIRUS_REJECT <br />*** Section antivirus *** <br />antivirus { <br /> clamav { <br /> action = "reject"; <br /> message = "${SCANNER}: virus found: \"${VIRUS}\""; <br /> servers = "127.0.0.1:3310"; <br /> whitelist = "/etc/rspamd/antivirus.wl"; <br /> type = "clamav"; <br /> symbol = "CLAM_VIRUS"; <br /> } <br />} <br /><br />*** End of section antivirus ***</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace';"><br />In dem Logfile </span><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">/var/log/rspamd/rspamd.log finde ich:</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">2021-03-29 09:24:53 #19614(main) lua; lua_cfg_transform.lua:498: nested section: antivirus { antivirus { ... } }, it is likely a configuration error </span><span style=" font-family:'monospace';"><br />2021-03-29 09:24:54 #19614(main) <dpkjgp>; lua; antivirus.lua:83: unknown antivirus type: antivirus <br />2021-03-29 09:24:54 #19614(main) <dpkjgp>; lua; antivirus.lua:161: cannot add rule: "antivirus"<br /><br />Ein Eicar-Test von heise.de wird ungetestet zugestellt. <br />Mir ist jetzt nicht klar, warum ich hier eine "nested section" habe, antivirus ist nur an dieser Stelle konfiguriert.<br />Warum ist der antivirus-Typ unbekannt und wo erstelle ich welche Regel "antivirus"?<br />Ich finde leider im Internet und bei rspamd.com nichts dazu.<br /><br />Beste Grüße</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace';">Andreas<br /><br /><br /></span></p></body></html>