# Default: disabled
LogFile /var/log/clamav/clamd.log

# By default the log file is locked for writing - the lock protects against
# running clamd multiple times (if want to run another clamd, please
# copy the configuration file, change the LogFile variable, and run
# the daemon with --config-file option).
# This option disables log file locking.
# Default: no
#LogFileUnlock yes

# Maximum size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size
# in bytes just don't use modifiers.
# Default: 1M
#LogFileMaxSize 2M

# Log time with each message.
# Default: no
LogTime yes

# Also log clean files. Useful in debugging but drastically increases the
# log size.
# Default: no
#LogClean yes

# Use system logger (can work together with LogFile).
# Default: no
#LogSyslog yes

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
# Default: LOG_LOCAL6
#LogFacility LOG_MAIL

# Enable verbose logging.
# Default: no
#LogVerbose yes

# This option allows you to save a process identifier of the listening
# daemon (main thread).
# Default: disabled
PidFile /var/run/clamd.pid

# Optional path to the global temporary directory.
# Default: system specific (usually /tmp or /var/tmp).
TemporaryDirectory /tmp

# Path to the database directory.
# Default: hardcoded (depends on installation options)
DatabaseDirectory /var/lib/clamav <=== ścieżka gdzie ma być baza i plik clamd.sock

# The daemon works in a local OR a network mode. Due to security reasons we
# recommend the local mode.

# Path to a local socket file the daemon will listen on.
# Default: disabled (must be specified by a user)
LocalSocket /var/lib/clamav/clamd.sock <=== ścieżka gdzie ma być baza i plik clamd.sock

Wed Aug 20 00:09:24 2008 -> +++ Started at Wed Aug 20 00:09:24 2008
Wed Aug 20 00:09:24 2008 -> clamd daemon 0.90.2 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Aug 20 00:09:24 2008 -> Log file size limited to 1048576 bytes.
Wed Aug 20 00:09:24 2008 -> Reading databases from /var/lib/clamav
Wed Aug 20 00:12:41 2008 -> +++ Started at Wed Aug 20 00:12:41 2008
Wed Aug 20 00:12:41 2008 -> clamd daemon 0.90.2 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Aug 20 00:12:41 2008 -> Log file size limited to 1048576 bytes.
Wed Aug 20 00:12:41 2008 -> Reading databases from /var/lib/clamav
Wed Aug 20 00:15:22 2008 -> +++ Started at Wed Aug 20 00:15:22 2008
Wed Aug 20 00:15:22 2008 -> clamd daemon 0.90.2 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Aug 20 00:15:22 2008 -> Log file size limited to 1048576 bytes.
Wed Aug 20 00:15:22 2008 -> Reading databases from /var/lib/clamav

  822 mail      20   0 35380  34m 1024 R 99.7  9.3  12:53.21 clamd
  957 root      10   0   960  960  772 R  0.3  0.3   0:00.08 top
    1 root       8   0   468  468  416 S  0.0  0.1   0:09.20 init
    2 root       9   0     0    0    0 S  0.0  0.0   0:00.00 keventd
    3 root       9   0     0    0    0 S  0.0  0.0   0:00.00 kapmd
    4 root      18  19     0    0    0 S  0.0  0.0   0:00.00 ksoftirqd_CPU0
    5 root       9   0     0    0    0 S  0.0  0.0   0:00.00 kswapd
    6 root       9   0     0    0    0 S  0.0  0.0   0:00.00 bdflush
    7 root       9   0     0    0    0 S  0.0  0.0   0:00.00 kupdated
    8 root       9   0     0    0    0 S  0.0  0.0   0:00.00 xfsbufd
    9 root       9   0     0    0    0 S  0.0  0.0   0:00.00 xfslogd/0
   10 root       9   0     0    0    0 S  0.0  0.0   0:00.00 xfsdatad/0
   14 root      -1 -20     0    0    0 S  0.0  0.0   0:00.00 mdrecoveryd
   15 root       9   0     0    0    0 S  0.0  0.0   0:00.60 kjournald
   34 root       9   0     0    0    0 S  0.0  0.0   0:00.40 kjournald
   35 root       9   0     0    0    0 S  0.0  0.0   0:01.23 kjournald
   36 root       9   0     0    0    0 S  0.0  0.0   0:00.01 kjournald

/var/lib/clamav/

telnet wislanka.pl 25
Trying 83.12.215.26...
Connected to wislanka.pl (83.12.215.26).
Escape character is '^]'.
220 +OK wislanka.pl ready
ehlo homelinux.org
250-router.wislanka.pl Hello acbn79.neoplus.adsl.tpnet.pl [83.9.111.79]
250-SIZE 10485760
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
mail from: maciek@homelinux.org
250 OK
rcpt to: postmaster@wislanka.pl
250 Accepted
data
354 Enter message, ending with "." on a line by itself
test dzialania smtp
.
250 OK id=1L55Mx-0004pQ-Jy
quit
221 router.wislanka.pl closing connection
Connection closed by foreign host.

[root@router jurzikowianka]# pacman -Q exim
exim 4.67-7nnd
[root@router jurzikowianka]# pacman -Q clamav
clamav 0.94-1nnd

 telnet wislanka.pl 25

220 +OK wislanka.pl ready

#########################################################################
#   Plik konfiguracyjny exima.conf wygenerowany przez nndconf/exim      #
#########################################################################
# UWAGA! plik konfigurujcy exima z zastosowaniem TLS/SSL oraz clamav.
# Ten konfig sprawdzony zosta w praktyce - aby dostosowa go do swoich wymaga
# musisz zmieni wpisy dotyczce domeny (jest wislanka.pl), nazwy hosta (jest router)
# oraz ewentualnie zakresu wewntrznej sieci (jest 192.168.1.0/24).
# Moesz te uruchomi nndconf i wybra konfiguracj exima.
######################################################################
#                         USTAWIENIA GWNE                          #
######################################################################
primary_hostname = router.wislanka.pl
domainlist local_domains = @:localhost:wislanka.pl
domainlist relay_to_domains =
hostlist   relay_from_hosts = 127.0.0.1
acl_smtp_auth = acl_check_auth
acl_smtp_mail = acl_check_mail
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
av_scanner = clamd:/var/lib/clamav/clamd.sock
##    Spamassassin uruchamiany przez wtyczkje sa-exim.
##    przed uruchomieniem nalezy skonfigurowac sa-exima!
#
# local_scan_path = /usr/lib/exim/local_scan/sa-exim.so
# spamd_address = 127.0.0.1
tls_certificate = /etc/mail/exim.crt
tls_privatekey = /etc/mail/exim.key
tls_advertise_hosts = *
daemon_smtp_ports = 25 : 465
tls_on_connect_ports = 465
qualify_domain = wislanka.pl
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 5s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
message_size_limit = 10M
smtp_banner = +OK wislanka.pl ready
#################################################
#        DNS RBLs - lokalna biaa lista         #
#################################################
# hostlist rbl_white_host = /etc/mail/white_hosts
#################################################
#       Zmienia nagwki w poczcie od:          #
#################################################
received_header_text  = "Received: \
    ${if def:sender_rcvhost {from $sender_rcvhost\n\t}  \
    {${if def:sender_ident {from $sender_ident }}\
    ${if def:sender_helo_name {(helo $sender_helo_name)}}\n\t}}  \
    by $primary_hostname (router SMTP) \
    ${if def:received_protocol {with $received_protocol}}\n\t  \
    ${if def:tls_cipher {(tls_cipher $tls_cipher) }}\
    ${if def:tls_peerdn {(tls_peerdn $tls_peerdn) }}\
    id $message_id\
    ${if def:received_for {\n\t  for <$received_for>}}"
######################################################################
#                       KONFIGURACJA ACL                             #
#         Specifies access control lists for incoming SMTP mail      #
######################################################################
begin acl

acl_check_auth:
  accept  encrypted     = *
  deny    message       = STARTTLS required before AUTH

acl_check_mail:
  accept  condition     = ${if or { \
                        {eq{$authenticated_id}{}} \
                        {eq{$authenticated_id@wislanka.pl}{$sender_address}} \
                        }{1}{0}}
  deny    message       = Authenticated user must match sender!

acl_check_rcpt:
  accept  hosts = :
  deny    message       = Restricted characters in address
          domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]
  deny    message       = Restricted characters in address
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
  accept  local_parts   = postmaster
          domains       = +local_domains
  require message       = Can't verify sender
          verify        = sender
  accept  hosts         = +relay_from_hosts
  accept  authenticated = *
  require message        = Authenticate first - Najpierw si zaloguj
          sender_domains = !+local_domains
          message        = Relay not permitted
          domains        = +local_domains : +relay_to_domains
          message        = Can't verify recipient
          verify         = recipient
##  Odrzuca poczt, jeli host wysyajcy znajduje si na spam-listach
##  ( DNS RBLs ).
##  UWAGA: to jest przykad, adresy list cigle si zmieniaj
##         niektre z niej wymienionych mog ju nie funkcjonowa,
##         czasem powstaj nowe.
#  deny  message  = Host $sender_host_address is blacklisted in $dnslist_domain.
#        hosts    = !+rbl_white_hosts
#        dnslists = \
#               virbl.dnsbl.bit.nl : \
#               list.dsbl.org : \
#               dnsbl.sorbs.net : \
#               bl.spamcop.net : \
#               sbl.spamhaus.org : \
#               xbl.spamhaus.org
  accept

acl_check_data:
# Odrzuca wiadomo z powanym bdem MIME
  deny  message   = This message contains serious MIME error ($demime_reason)
        demime    = *
        condition = ${if >{$demime_errorlevel}{2}{1}{0}}
# Odrzuca wiadomo zawierajc potencjalnie niebezpieczny zacznik
  deny  message = Unwanted file extension - nie akceptujemy plikw ($found_extension)
        demime  = scr:vbs:bat:lnk:pif:exe:com:dll:reg
# Odrzuca wiadomo zawierajc wirus(a|y) wykryte(go) przez clamav
  deny  message = Virus found - znaleziono wirusa ($malware_name)
        malware = *
## Odrzuca wiadomo, zawierajc w treci sowo "viagra", uwzgldniajc kombinacje
## ze spacjami oraz duymi i maymi literami.
## UWAGA: to jest tylko przykad
#  deny  message = This message matches a blacklisted regular expression (\regex_match_string)
#        regex = [Vv]*[Ii]*[Aa]*[Gg]*[Rr]*[Aa]
#
  accept

######################################################################
#                      ROUTERS CONFIGURATION                         #
#               Specifies how addresses are handled                  #
######################################################################
#     THE ORDER IN WHICH THE ROUTERS ARE DEFINED IS IMPORTANT!       #
# An address is passed to each router in turn until it is accepted.  #
######################################################################
begin routers
# domain_literal:
#   driver = ipliteral
#   domains = ! +local_domains
#   transport = remote_smtp
dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more
system_aliases:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup{$local_part}lsearch{/etc/mail/aliases}}
  file_transport = address_file
  pipe_transport = address_pipe
userforward:
  driver = redirect
  check_local_user
  file = $home/.forward
  no_verify
  no_expn
  check_ancestor
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply
##  Procmail router
# procmail:
#   driver = accept
#   check_local_user
#   transport = procmail_pipe
#   cannot_route_message = Procmail error
localuser:
  driver = accept
  check_local_user
  transport = local_delivery
  cannot_route_message = Unknown user
######################################################################
#                      TRANSPORTS CONFIGURATION                      #
######################################################################
#                       ORDER DOES NOT MATTER                        #
#     Only one appropriate transport is called for each delivery.    #
######################################################################
begin transports
remote_smtp:
  driver = smtp
local_delivery:
  driver = appendfile
  file = /var/spool/mail/$local_part
  delivery_date_add
  envelope_to_add
  return_path_add
address_pipe:
  driver = pipe
  return_output
address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add
address_reply:
  driver = autoreply
##  Procmail transport
#  procmail_pipe:
#    driver = pipe
#    command = /usr/bin/procmail -d $local_part
#    return_path_add
#    delivery_date_add
#    envelope_to_add
#    check_string = "From "
#    escape_string = ">From "
#    user = $local_part
#    # group = mail
######################################################################
#                      RETRY CONFIGURATION                           #
######################################################################
begin retry
# This single retry rule applies to all domains and all errors. It specifies
# retries every 15 minutes for 2 hours, then increasing retry intervals,
begin retry
# This single retry rule applies to all domains and all errors. It specifies
# retries every 15 minutes for 2 hours, then increasing retry intervals,
# starting at 1 hour and increasing each time by a factor of 1.5, up to 16
# hours, then retries every 6 hours until 4 days have passed since the first
# failed delivery.
# Address or Domain    Error       Retries
# -----------------    -----       -------

*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
######################################################################
#                      REWRITE CONFIGURATION                         #
######################################################################
# There are no rewriting specifications in default configuration file.
begin rewrite
######################################################################
#                   AUTHENTICATION CONFIGURATION                     #
######################################################################
begin authenticators
plain:
  driver = plaintext
  public_name = PLAIN
  server_prompts = :
  server_condition = ${if pwcheck{$2:$3}{1}{0}}
  server_set_id = $2
login:
  driver = plaintext
  public_name = LOGIN
  server_prompts = "Username:: : Password::"
  server_condition = ${if pwcheck{$1:$2}{1}{0}}
  server_set_id = $1
######################################################################
#                   CONFIGURATION FOR local_scan()                   #
######################################################################
# If you have built Exim to include a local_scan() function that contains
# tables for private options, you can define those options here. Remember to
# uncomment the "begin" line. It is commented by default because it provokes
# an error with Exim binaries that are not built with LOCAL_SCAN_HAS_OPTIONS
# set in the Local/Makefile.
# begin local_scan
######################################################################
#                 End of Exim configuration file                     #
######################################################################