Topic: ClamAV Question

[ryan]

I have SME 5.6 infront of Exchange to filter for spam.  Exchange is the delegate mail server and there are no user accounts on this SME server.

I want to test ClamAV on SME.  Will it work when a delegate mail server is defined?  

Ryan

[shanen]

It works so well that you will wonder how you did without it...

[Anonymous]

I concur - its amazing. Stopped mydoom recently when all our paid enterpise solutions failed.

[ryan]

Does ClamAV update its virus definition tables by itself?  

I only ask since you guys respond so quickly...faster than looking it up on the ClamAV web site.  

ryan

[pete]

Yep - what virus scanner doesnt?

Mine is set to hourly, you will be surprised how often it gets updated, more often than our enterprise products, etrust, nav, sav etc

[ryan]

Thanks for the quick replies.....The auto update meant to ask about FREE auto updates versus a subscription for updates/support.

I also use the smtpfront with built in rbl filtering.  Will this work with ClamAv?  

Is this install script solid enough to run on a live production server?  (I will do a backup to file first)......

ryan

[pete]

Its FREE! everything about is it FREE.

I know nothing of the other products you want to use, but i use it with Mailscanner (would anything else for serious mails scanning), its used to scan mail for 2 domains, around 2500 messages per day...its solid.

[shanen]

Set a cron job to update virus definitions hourly.
Denying mail from rbl's can be dangerous but you are probably already aware of that...
I use Spam Assassin and set a custom (higher) score for positive rbl lookups to guarantee tagging and filter on that rule. At least I can have a look at what has been denyed to end users.
If you need help, then it is all here and waiting...

[Boris]

I only ask since you guys respond so quickly...faster than looking it up on the ClamAV web site.
ryan

You won’t get spoiled and use this forum instead of reading the manuals, will you?

[cosy2]

Can someone please tell me step to update my Clam Antivirus daily or hourly.

[Mick]

If you used Jesper Knudsen's script to install ClamAV and Amavis, it is probably getting updated hourly already (assuming you a connected to the net 24 hrs a day).

If not, that script might be a good place to start:

http://sme.swerts-knudsen.dk/howtos

[tymiles]

I am using the Dungog.net panel for ClamAV, H+bedv and amavis. It's $35 but worth every penny. I have all of those installed and it is catching everything. And what Clam does not get H+bedv will and vice versa.

Check dungog out here. http://www.dungog.net/sme/help/

Go to www.dungog.net to purchase if you like it.

They also give you more simple directions to set up the stuff then what is on http://sme.swerts-knudsen.dk/ (You can get the RPM's on dungog also to make the install quicker even if you don't buy the panel)

[cosy]

Step-by-step guide for install of the AV addon:

<pre>
1. rpm -Uvh clamav-0.62-2.i386.rpm
2. mkdir perl
3. cp 16perl&archive-rpms.zip perl/
4. cd perl/
5. unzip 16perl&archive-rpms.zip
6. rpm -Uvh perl*
7. rpm -Uvh arc*
   rpm -Uvh lha*
   rpm -Uvh unarj*
   rpm -Uvh unrar*
   rpm -Uvh zoo*
[or 6+7. rpm-Uvh *.rpm ??]
8. rpm -Uvh qmail-bsmtp-0.1-1.noarch.rpm
9. rpm -Uvh amavis-ng-0.1.6.4-03dc.noarch.rpm
10. rpm -Uvh dungog-antivirus-0.1.6-6.noarch.rpm
11. http://yourserver/server-manager to finish off configuration options

is this mean do i need to buy this software? Look to me pannel also there.

[ryan]

I have ClamAV working on a test system.

If ClamAV is installed on SME 5.6 what will happen when I upgrade to 6.0.1(once released).  Is there a script to remove ClamAV so it can be reinstalled on the upgraded server or will the 6.0.1 upgrade process make the necessary changes?

ryan