Give your comments on Antivirus Scanning for SME 6.0 - Clam Antivirus and Amavis-ng here. Thanks in advance!
- Ian Wells: April 2004
This works well on SME 6.01. The installation via Yum could not get any easier. The server-panel lets you see all quarantined messages and either delete/forward them - no need to use the shell. This is how all all contribs should be - a really good contrib.
(edited May 04 due to update of How To)
- Brian J Read, 22nd April 2004
As Ian says this works wonderfully well, except that the calls to "freshclam" to refresh the database are schedules for the 0th minute of the hour. The servers get very bussy at this time. So i have made a small change to the template in:
/etc/e-smith/templates/etc/crontab/40freshclam
to randomise the freshclam call, based on the minutes past the hour when the template is expanded.
You can find the revised template at:
http://ftp.contribs.org/contribs/bread/clamav/freshclam/
I'll email Damien with this as well (incase he misses this comment), so that he can consider whether to add the change to the package.
Cheers
Brian
- Aussie 30 May 2004
Well MANY THANKS to Damien who had an easy install AND TO YOU for this MARVELLOUS update! (fortunate are we that just use it!)
- Three helpfull comments:
- the change to local host requires the ; removing at line start:
you mention this in another section but not this one
- I use 2 emails for admin messages, as many would (internal admin and external consultant):
perhaps add a note and example that multiples can be concatenated by a comma.
- in Australia many still have only dialup modem! to be able to download and save the files would be good !
- thowden 28th July 2004
Thanks for a great package for SME. Installed on a number of systems and it works fine.
One bug that I had is caused by Amavis.
Amavis provides a small issue with managing emails where the Return-path is null or <>. It processes this as a null and then returns the address as <"<>"> which is invalid to other MTA's like Exchange.
To fix this use your favourite editor (mine is mcedit):
mcedit /usr/lib/perl5/site_perl/5.6.1/AMAVIS/MTA/Qmail.pm
and locate line 135 which should read
$$args{'sender'}='<>';
change this to remove the <>
$$args{'sender'}=''; -note that this is two single ' quotes with nothing between them!
and save your file.
This should work instantly, no need to reset the server or anything.
cheers Tony
- azche24, 30.08.2004
An excellent Addon! I use it on my 2 Servers without any Problems.
But: With the regular full-scan of amavis there should be an option to remove infected files. I do not know how to achive this. I am using assp, so all the evil worms and virii go into /user/local/assp/spam or ../virii ; they are scanned again and again by clamav, but the are not removed (as it should be).
O.K.: I got some help and solved it:
- Edit /etc/e-smith/templates/etc/clamscan/20body
- In the line, where it says .../clamscan --recursive ADD --remove
And save!
This will show the infected files and delete them. Nice!
cheers Alex/