Zimbra – Release a False Positive Virus eMails

By Kernel 7 On June 2nd, 2008

To release an email that has been Virus-Tagged, as “root“, follow these steps:

(0) Download:
http://www.amavis.org/contrib/furio.infect

(1) Add this lines at the top of the quarantined email:
X-Quarantined-From: <sender@domain.com>
X-Quarantined-To: <recipient@domain.com>

(2) Run:
./furio.infect /opt/zimbra/amavisd/quarantine/virus-XXXXXXXXXXX
(where “virus-XXXXXXXXXXX” is the quarantined email)

Zimbra – Fix Crashed ClamAV

By Kernel 7 On June 1st, 2008

If you get the Zimbra’s error message “WARNING: Your ClamAV installation is OUTDATED!“, as “root“, follow these steps to recover from the crashed ClamAV process:

su – zimbra
mkdir /tmp/clamdb
mv /opt/zimbra/clamav/db/* /tmp/clamdb/
zmprov ms `zmhostname` +zimbraServiceEnabled antivirus
/opt/zimbra/clamav/bin/freshclam –config-file=/opt/zimbra/conf/freshclam.conf
zmamavisdctl stop
zmamavisdctl start
zmcontrol stop
zmcontrol start
zmclamdctl restart