ClamAV

[tgaugh]

After the last DSM update we have this virus control now. I also read how some of you are requiring scripts to clean up your quarrantined areas. Excellent!

As I mentioned before this is not the case for me. I have enabled ClamAV on all domains, and all accounts. Now it says enabled on all. This means I successfully changed the text from "enable" to "disable"

At the bottom of all my domains I get a message like:

2 Message(s) have been quarentined for the domain domain.com.

==============================================

What is funny about that is that is a message from my own domain, and I get some 4-5 virus a day that is weeded out by my client software, NOT filtered by the server.

My clients call me with the same complaint.

What are you all doing to make clamAV, filter correctly? I can't find anything within DSM to make it work. Please share, thanks!!!

tgaugh

[tgaugh]

looking for 5upport.

tgaugh

[LeeJ]

clamav is is implemented using the standard method located at www.clamav.net. Listed within the product documentaion there are many things you can do as an advanced user to achieve tighter virus scanning protection.


Based on your other posts you may have a global mailfilter file issue.

[tgaugh]

Any recommendations on what I can check to validate this potential filtering issue?

THe default clamav and spamassasin installs are not filtering anything.... thanks.

tgaugh

[gonecrazy]

you can check the headers of the message you recive to see if it has been filtered through spamassassin. The spamassassin header is usaully x-spam something, which will give you the version of spam assassin and a short report on how many points the message recived. When spam assassin was first added to dsm I had to install it myself. if you are using fedora core you can just do a
yum --install spamassassin
from the command line. and then
/etc/rc.d/init.d/spamassassin start
to get it up and running. also you might want to do a
chkconfig --levels 345 spamassassin on
to make it start on reboot.

As for clamav you need to modify the freshclam.conf update file in etc with the right clamav directory (/usr/local/share/clamav), and add it to cron so that clamav dat files update everynight you can add these lines to crontab to do that
# update clamav
12 3 * * * /usr/local/bin/freshclam

I also had to change permisons on the /usr/local/share/clamav directory to the clamav user so the update would work correctly
chgrp clamav /usr/local/share/clamav
chown clamav /usr/local/share/clamav

Also on other thing to look out for is my clamav didn't install properly from dsm untill i added net::telnet to my machine. if there is no /usr/local/share/clamav folder on your machine it is a good possiblity that you have this problem too, and a install of net::telnet and then a quick dsm update will solve the problem.

One more thing about spamassassin is i would join the spamassassin user list to get any questions answered about the auto-learn and bayes filtering. Also you probablly should add some custom rules to you spamassassin install. they can be located here: http://www.rulesemporium.com/ and check out razor2, it can make your spamassassin work much more effective, you can get it at http://razor.sourceforge.net

[tgaugh]

Man thanks a lot that was exactly what I was looking for!