Antivirus for UNIX-like systems primarily for mailserver integration.

learn more… | top users | synonyms

1
vote
1answer
64 views

Creating an SELINUX allow rule for sockets error with clamd

I've got a CentOS 7 box configured as a Squid proxy, with clamav and Squidclamav. Normally I would just disable SELINUX, but I am attempting to understand and setup allow rules properly. I've managed ...
0
votes
1answer
22 views

Clamdscan error when launched by apache user “No file descriptor received. ERROR”

We're trying to use clamav on a centos 7 server in order to scan directly files on our web apps (Moodle for example). When trying to execute a clamdscan from apache, we got this error (the file belong ...
1
vote
1answer
66 views

Can I get clamav-daemon to run without first updating with freshclam?

It's painfully slow to run freshclam, but clamav-daemon won't start without it: $ sudo service clamav-daemon start * Clamav signatures not found in /var/lib/clamav * Please retrieve them using ...
1
vote
1answer
343 views

Configuration of ClamAV on Fedora Core 21 with Postfix

I was unable to find any help anywhere on installing Clamav on a modern Fedora system. All the advice out there is old and doesn't apply - so far as I found anyway. And, it's not enough ...
0
votes
0answers
44 views

Disable Squid ACL rules after redirects

I have a squid clamav proxy with some fairly restrictive ACL set up for particular sites and urls on those sites that we trust. Unfortunately, a site we now wish to trust distributes its content ...
0
votes
2answers
551 views

clamscan using maldet Error: Servname not supported for ai_socktype

So i have installed Linux Malware Detect (maldet) to scan a server and everything went fine with installation but when i run it i get an error. Bunch of errors and than the scan just closes it. Here ...
2
votes
1answer
84 views

Logwatch clam-update warnings

In Debian Linux stable version, there is always lag between current and stable version. Thus one of packages Clamav is very noisy about this, and log files are full of: WARNING: Your ClamAV ...
-2
votes
1answer
365 views

enable fanotify on oracle redhat linux kernel 2.6.39-400

As a newbie in linux environment, I am trying to install clamav daemon, which is clamd, on oracle redhat linux 6 kernel EUK 2.6.39-400. It needs to have fanotify enabled in the kernel. As I see there ...
0
votes
1answer
330 views

Diagnosing an alleged trojan reported by ClamAV [duplicate]

Unfortunately I have very little Linux experience. We have an Amazon instance running Debian 7.6 and got a message from Amazon saying we were port scanning. We have hopefully stopped this by ...
1
vote
1answer
291 views

Clamav milter forward a copy of infected emails

I have a working postfix + clamav installation. How can I configure this to not just quarantene infected emails but if this happens also send a copy of the email to the sysadmins address? What I ...
1
vote
2answers
178 views

Hourly Clamscan cron script failes at reading file list

I've this piece of code located in /etc/cron.hourly/hourlyclamscan. #!/usr/bin/bash # Create Hourly Cron Job With Clamscan # Directories to scan SCAN_DIR=/home/transmission/Downloads # Temporary ...
0
votes
1answer
1k views

run_av (ClamAV-clamd) and ClamAV-clamd av-scanner FAILED - unexpected

I get a strange error when scanning email. Sep 17 15:13:26 mail amavis[616]: (00616-02) (!)run_av (ClamAV-clamd) FAILED - unexpected , ...
0
votes
0answers
100 views

dynamic IP firewall configuration for public-yum.oracle.com and clam AV

I currently have Clam AV installed as the AV solution for an Oracle Linux environment. The firewall that I use allow filtering only through specific IPs and thus currently, I am not able to configure ...
0
votes
2answers
2k views

`/etc/init.d/clamd start` `[FAILED]` log gives ERROR: daemonize() failed: Cannot Allocate Memory?

On Cent OS total Mem: 510876kb /etc/init.d/clamd start in /var/log/clamav ERROR: daemonize() failed: Cannot Allocate Memory? Is this a problem that can be solved? I thought Clamd only needed 20 ...
2
votes
2answers
4k views

Up to date ClamAV on Debian Wheezy (ClamAV installation is OUTDATED log message)

I've installed ClamAV on Debian Wheezy from the offical repositories, using apt. System is up to date and I don't get any updates via apt-get upgrade, but still I get this message in the logs: Your ...
1
vote
1answer
81 views

Error in amavisd.conf -missing curly or bracket

I'm currently trying to setup Spam and Virus Filtering on my CentOS 6.4 machine using SpamAssassin and ClamAV. I've installed all necessary packages (SA, ClamAV and Amavisd-new) and configurated them. ...
2
votes
1answer
996 views

Disable ClamAV for Amavis

I have a Postfix mail server, using Amavis and Spamassassin to check for unwanted e-mails. I have removed ClamAV because it'd basically freeze the whole server every time someone received an e-mail, ...
-1
votes
1answer
39 views

Postfix with Clamd

I've been setting up my own VPS for an e-commerce, as well as a mail server. In order to setup the e-commerce, mysql and apache is running. In order to setup the mail server, I've installed postfix. ...
0
votes
1answer
123 views

Alert Postfix sender when outbound email is not delivered due to amavisd-new checks

I'm running Postfix 2.11 together with amavisd-new which works fine with spamassassin and clamav to prevent inbound/outbound spam and virus traffic. Right now i'm looking for a way to alert users ...
0
votes
1answer
646 views

clamd.amavisd Fails to start on CentOS

I have set up a CentOS cloud server but I am having issues getting clamd amavisd to run, when I call: /etc/init.d/clamd.amavisd start I get the following error: Starting clamd.amavisd: ...
0
votes
0answers
33 views

What accounts does clamav use on different Linux distros

I'm trying to fix a problem in a Chef recipe for installing / configuring ClamAV which is caused by the recipe using the wrong default user/group name for the clam service account on some platforms. ...
3
votes
1answer
103 views

Process 'clamd' “not monitored”

the output of monit summary says clamav is not monitored. The configuration says: check process clamd with pidfile /var/run/clamav/clamd.pid start program = "/etc/init.d/clamav-daemon start" ...
0
votes
1answer
393 views

Clamdscan scans file in 0 seconds

I have to run clamav on large files. I was wondering which command was the fastest between clamscan and clamdscan. But it seems that clamdscan is not working properly: it scans file larger than 1 GB. ...
0
votes
1answer
2k views

CLAMAV on Centos Mail Server: Can't connect to UNIX socket clamd.sock

In my Centos 6.4 server, I am using Postfix and Dovecot with Amavis/ClamAV filter. Lately I have been trying to solve my spam problem(only occurs in Gmail and Hotmail) so I've been tailing logs. ...
0
votes
3answers
3k views

centos 6.4 amavis-new, clamav not function

i install on centos 6.4 amavis-new and clamav /etc/clamd.d/amavisd # cat amavisd.conf # Use system logger. LogSyslog yes # Specify the type of syslog messages - please refer to 'man syslog' # for ...
1
vote
3answers
372 views

clamav can't find viruses in rar files on centos 6.4

I use ClamAV 0.97.8/17494 on CentOS 6.4. It's good but can't find viruses in rar files. It can detect same virus file as it is or in a zip file but in rar file ClamAV reports no virus. ...
0
votes
1answer
213 views

how to change ispconfig clamav log file location [closed]

On ispconfig 3 web interface, log files section under Monitor There are several log files, one of them is Mail Log and other is ClamAV Log. Unfortunately ClamAV log points to same file as Mail Log ...
-4
votes
3answers
1k views

Clamav. WARNING: No clamd server appears to be available

I have clamav.log full of these messages, what might be the problem and how to fix this? I have Debian clamav-0.97.6+dfsg-1~squeeze1 spamassassin-3.3.1-1 dovecot-pop3d-1.2.15-7 ...
0
votes
0answers
440 views

Cannot start clamd

I just installed iRedMail on a fresh CentOS 6.3 server and clamd is failing to start. When I try to start it, I get the following: [root@mail1-ny]# service clamd restart Stopping Clam AntiVirus ...
1
vote
1answer
739 views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
0
votes
2answers
1k views

Where is ClamAV quarantine folder?

I want to restore some files from quarantine after I have executed clamscan some times. But I cannot find the quarantine folder in the configuration. How should I find the address of the quarantined ...
1
vote
3answers
2k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
0
votes
2answers
958 views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
0
votes
1answer
223 views

Centos5 /tmp/.xzibit Displays multiple viruses in clamav, Can I delete this directory safely? [duplicate]

Possible Duplicate: How do I deal with a compromised server? I did a scan on my entire vps finding the folder above with a good amount of viruses. Can I safely delete this folder? Can I ...
0
votes
1answer
630 views

Can LocalSocketGroup be successfully set to a non-default? Error: Failed to change socket ownership

I want to start clamd normally as a root user, and assign the local socket to be used by Qmail-Scanner (only). clamd runs as user/group clamav, qmail-scanner-queue as qscand. $ id -nG clamav clamav ...
-2
votes
1answer
745 views

Should I use ClamAV?

I installed ClamAV and PHP-ClamAV on my Ubuntu server. Everything works... But it is extremely slow. Even when I just call basic functions without scanning a file. So it got me wandering if I really ...
1
vote
1answer
2k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: ...
-1
votes
1answer
1k views

ClamD server Currently Down [closed]

I'm getting this error message after install ClamAV from direcadmin message system. OS: CentOs 5. The service 'clamd' on server starhost.net is currently down This message has been automatically ...
0
votes
1answer
180 views

can not load clamav-extension

I try to use the clamav-extension by following these steps. There weren't any errors, but after restarting apache, no clam-extension is loaded. php -v returns no errors. I've set the extension_dir ...
-1
votes
1answer
109 views

How to detect mail server dangerous load level?

I have a 512 MB VPS running on Debian Squeeze 64bit serving a complete email system (postfix, courier, amavis, clamav, spamassassin, roundcube). All the RAM is always used: max free memory is 10MB, ...
2
votes
6answers
2k views

Websites on Ubuntu 8.04 LTS with Plesk are infected with viruses [duplicate]

I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the ...
1
vote
3answers
1k views

Scan whole system or just user dirs with clamav

I'm in doubt about how to scan my Linux system with Clamav: do I just scan the places where users can upload files (homedirs, their webroots) or do I scan the whole system? The various sites I've ...
3
votes
1answer
1k views

Quarantined mail retrieval from SpamAssassin/ClamAV/Postfix

We run a mail relay service in a multi tenant deployment for clients. We started doing this because commercially available relay services were silly money when compared to the costs of building one ...
1
vote
1answer
1k views

Setting up ClamAV with Exim and Mailman on Debian Squeeze

I manage a Debian Squeeze server that uses Exim as the MTA and runs several mailing lists using Mailman. I'd like to set up ClamAV to block viruses that may get posted to a list. I'm having trouble ...
5
votes
1answer
723 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
2
votes
2answers
386 views

Installing ClamAV on Ubuntu

I'd like to install ClamAV on my Ubuntu Servers (LAMP). Is it good to go (as a daemon) out-of-the-box, or does it need some configuration? Do I need to add a line to my crontab to update virus ...
0
votes
3answers
3k views

Downloading large files fails, Squid + c-icap + SquidClamAV

I am building a new proxy server with Squid & SquidClamAV. I am facing problems with downloading large files. I have set a maxsize of 52428800 bytes in squidclamav.conf - which should prevent the ...
1
vote
2answers
753 views

Using ClamAV to virus scan uploaded files on Ubuntu Production Servers

I am planning to use ClamAV to virus scan files being uploaded to a Web Application running on Ubuntu Servers. ClamAV will be installed on a dedicated server and when the file is being uploaded, the ...
1
vote
0answers
422 views

How do I configure MailScanner to use a remote clamd?

I decided to decrease the workload on my mail gateway by moving anti-virus processing to a separate server. I created the server, installed clamav-daemon on it, and tested it by running clamdscan from ...
0
votes
1answer
288 views

How do I specify clamd's IP address when using clamdscan?

I set up a separate host for clamd to handle virus-scanning, and I want to test it before putting it in production. Now, while MailScanner's configuration for remote clamd is clear and simple, I can't ...