-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Ankush Grover wrote:
| Hey, | | Thanks for the earlier reply. | |> b) How do I know whether the clamav is working properly or not. |> |> ans. through logs..........and through mail headers. the scan |> result clean or infected is written there........ | | | I checked the logs but i don't see anything regarding the clamav | .Like the mail is virus free or is scanned by clamav nothing like | that neither in logs nor in mail headers.
(1) Be sure you have configured sendmail to operate with clamav, it isn't as simple as installing the clamav files. (a) Edit sendmail.mc and add the lines:
INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clamav/clamav-milter.sock,F=,T=S:4m;R:4m;E:10m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter')dnl
(b) Be sure to start the `clamav-milter' service. Also, check the run-level. ~ service clamav-milter start ~ chkconfig --list clamav-milter
|> c) As mentioned before clamav is installed on a system running as |> Mail and Samba server.If there is any windows/linux virus/worm on |> the machine will the Clamav will clean itself or i have to run |> the clamav for deletion of those infected files.Does clamav runs |> automatically once a week for scanning of the system if not I |> would like to configure clamav for that .Please tell me which |> clamav file to set for cron and also how to make the clamav do |> like first cleaning of infected files and if the cleaning of the |> infected files is not possible then deleting it.This type of |> action can be set in Antiviruses in Windows. |> |> ans. if u have integrated clamav to run with sendmail........a |> line has to written in sendmail, then it will automatically scan |> all the mails for all types of worms which are coming on port 25 |> or handled by sendmail. | | | | I am using postfix and I want clamav to scan every file going | through Postfix.How do I configure clamav to check all the mails | .Moreover what about the samba shares I want clamav to scan those | shares atleast once in a week .
(2) Lots of questions: ~ (a) ClamAV does not set itself up to scan your system on a regular basis. Most Linux boxes don't need this level. You can setup a cron job to scan though. Look up clamscan, clamdscan in the man pages. They describe the commands needed. ~ (b) Google samba-vscan-clamav for the samba module that allows samba scanning automatically. It is a bit slow for large files though. It uses samba's vfs options. ~ (c) I'd only use postfix if absolutely necessary. Sendmail with clamav allows the user immediate notification that the email has a virus! It will scan the mail as the user's computer is sending the file. Postfix will accept the mail then scan it later. ~ (d) ClamAV does not support cleaning the infected file. The scan using options in (a) above will only tell you which files look like they have a virus. The (b) option allows quarantining of files. But no clamav option will allow for cleaning of the files. This may be a future option, you may be able to write.
| | Thanks & Regards | | Ankush | Good Luck, and have fun, James -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCcjBokNLDmnu1kSkRAuvxAJsEGWsKsXyQDSkENikmeke0oKYs8wCdGLKW aYrOux7SwdBcC5a8zW9oEvs= =nqt6 -----END PGP SIGNATURE-----
