This depends on your setup. Usually there are indications in /var/log/mail.log mail.info or just maillog depending on the system really. Are you using a setup with amavis or rspamd?
If you use Rspamd, then via the Rspamd Web-UI or in the rspamd logs files. In case of a deprecated Amavis/SA/ClamAV setup typically in your server's maillogs.
Ok, now it depends on how clamav is integrated. /etc/rspamd/local.d/antivirus.conf shows you one example for clamav. Same setting but different section if you use https://rspamd.com/doc/modules/external_services.html#icap-protocol-specific-details It will not specificly say it was rejected due to virus scan on the first dashboard, but it should emit logs. Also depending on your configuration they can end up in syslog or get eaten by systemd ^^ https://rspamd.com/doc/configuration/logging.html
In case that ClamAV is correctly configured to work with Rspamd on your system, you should be able to find it if you search for the symbol name "CLAM_VIRUS" in the history tab of the Rspamd Web-UI. There should be also something logged in the rspamd log file if you search case insensitive for "virus".
https://en.wikipedia.org/wiki/EICAR_test_file could also be used to test the functioning of antivirus.
depends on what mail utils are installed on your local system. Code: echo -n 'X5ORUS-TEST-FILE!H+H*' > lottery.pdf echo "Here is 10 million dollars" | mailx -a lottery.pdf [email protected] please the see valid eicar signature at the wiki above, I do not want to post a virus on this board I think it is obvious where to put in the code, delete the X5....+H and put only the valid string in there.
