Why use clamav-server instance instead of clamd?

[silent_wumpus]

I have Fedora FC5, all the clamav* rpm's installed and sendmail is
working ok.
I followed the instructions in the /usr/share/doc/clamav-server*/README
file and created and clamd.sendmail instance. All <SERVICE> are
replaced with sendmail.

Before using the clam rpms I have downloaded the clam source and was
able to make this work. But I would rather use the rpm method because I
am not the only person who maintains the server and using yum is a good
thing

Using the old clamd service I could add the clamav-milter and it
worked. With the new use of the 'instance' a test email shows not X-Virus
statements in the headers. And the logs do not show anything. Do you have
to create a clamd.sendmail (my naming) and how does clamav-milter know
how talk to the instances socket? If there are any decent howtos or
faqs about how to sent up a instance (I am almost googled out on that one
) please let me know. Below is my entries.

/etc/clamd.d/milter.conf <- just placed a # in front of example line
/etc/clamd.d/sendmail.conf: (changes)
LogFile /var/log/clamd.sendmail
LogVerbose
PidFile /var/run/clamd.sendmail/clamd.pid
LocalSocket /var/run/clamd.sendmail/clamd.sock
User clamsendmail

/etc/passwd enty:
clamsendmail:x:501:502lamav Sendmail
User:/var/run/clamd.sendmail:/sbin/nologin

/etc/group:
clamsendmail:x:502:

/etc/sysconfig/clamd.sendmail:
CLAMD_CONFIGFILE=/etc/clamd.d/sendmail.conf
CLAMD_SOCKET=/var/run/clamd.sendmail/clamd.sock
CLAMD_OPTIONS=

/etc/mail/sendmail.mc line (used m4 sendmail.mc > sendmail.cf after
change)
INPUT_MAIL_FILTER(`clamav',
`S=local:/var/run/clamav-milter/clamav.sock,F=,T=S:4m;R:4m')dnl

results of ps ax | grep clam:
clamd.sendmail -c /etc/clamd.d/sendmail.conf
/usr/sbin/clamav-milter --max-children=2 -c /etc/clamd.d/milter.conf
local:/var/run/clamav-milter/clamav.sock

ls -l /var/run:
drwxr-x--- 2 clamsendmail root 4096 Jun 5 18:25 clamd.sendmail

ls -lR /var/run:
-rw-rw---- 1 clamsendmail clamsendmail 5 Jun 5 18:25 clamd.pid
srwxrwxrwx 1 clamsendmail clamsendmail 0 Jun 5 18:25 clamd.sock

[tw56]

I installed mine a while back and I guess I never got it quite right but good enough to work with. If I reboot my server I must type clamd at the command prompt. If I don't it gives a message about not being able to find and uses the secondary av scanner ClamAV-clamscan at /usr/bin/clamscan. I guess I'm saying try typing clamd at command prompt to see if it starts.

[liro]

Originally Posted by tw56

I installed mine a while back and I guess I never got it quite right but good enough to work with. If I reboot my server I must type clamd at the command prompt. If I don't it gives a message about not being able to find and uses the secondary av scanner ClamAV-clamscan at /usr/bin/clamscan. I guess I'm saying try typing clamd at command prompt to see if it starts.

have you enabled clamd?

chkconfig clamd on

what gives 'chkconfig --list clamd'?

if so, it should be started at boot time...

[tw56]

Yep that was all I needed. Thanks

[silent_wumpus]

Yes clamd.sendmail is running (the instance I created). Also I have retraced
my sets by examining the /etc/clamd.d/exim.conf example (and associated
files) and can not seem to find whats wrong. Is there more information that
I need to post to figuire this problem out? Any advice would be helpful.

Thanks in advance.

Tim