Give your comments on Antivirus Scanning for SME 6.0 - Clam Antivirus and Amavis-ng here. Thanks in advance!


This works well on SME 6.01. The installation via Yum could not get any easier. The server-panel lets you see all quarantined messages and either delete/forward them - no need to use the shell. This is how all all contribs should be - a really good contrib.
(edited May 04 due to update of How To)


As Ian says this works wonderfully well, except that the calls to "freshclam" to refresh the database are schedules for the 0th minute of the hour. The servers get very bussy at this time. So i have made a small change to the template in:

/etc/e-smith/templates/etc/crontab/40freshclam

to randomise the freshclam call, based on the minutes past the hour when the template is expanded.

You can find the revised template at:

http://ftp.contribs.org/contribs/bread/clamav/freshclam/

I'll email Damien with this as well (incase he misses this comment), so that he can consider whether to add the change to the package.

Cheers

Brian


Well MANY THANKS to Damien who had an easy install AND TO YOU for this MARVELLOUS update! (fortunate are we that just use it!)

you mention this in another section but not this one

perhaps add a note and example that multiples can be concatenated by a comma.


Thanks for a great package for SME. Installed on a number of systems and it works fine.

One bug that I had is caused by Amavis.

Amavis provides a small issue with managing emails where the Return-path is null or <>. It processes this as a null and then returns the address as <"<>"> which is invalid to other MTA's like Exchange.

To fix this use your favourite editor (mine is mcedit):

mcedit /usr/lib/perl5/site_perl/5.6.1/AMAVIS/MTA/Qmail.pm

and locate line 135 which should read

$$args{'sender'}='<>';

change this to remove the <>

$$args{'sender'}=''; -note that this is two single ' quotes with nothing between them!

and save your file.

This should work instantly, no need to reset the server or anything.

cheers Tony


An excellent Addon! I use it on my 2 Servers without any Problems.

But: With the regular full-scan of amavis there should be an option to remove infected files. I do not know how to achive this. I am using assp, so all the evil worms and virii go into /user/local/assp/spam or ../virii ; they are scanned again and again by clamav, but the are not removed (as it should be).

O.K.: I got some help and solved it:

And save!

This will show the infected files and delete them. Nice!

cheers Alex/