Koozali.org: home of the SME Server

RAV and Clam together on 5.5

Paul Wolsink

RAV and Clam together on 5.5
« on: January 19, 2003, 09:51:30 PM »
Hi There
Has anyone tried to run more than one Anti-Virus application on one server together? I have a v5.5 and would like to run it together, but don't know if it will succeed and if so how to go about it. You probably can not just install it as seperate products on one machine as you would do if you only install one or the other.
Maybe run each app on a seperate server and pass the mail through to the next server?

regards
Paul

gavin

Re: RAV and Clam together on 5.5
« Reply #1 on: January 20, 2003, 08:31:01 AM »
I tried out an old version of Sophos sweep (Just for confirmation you understand) using the amavis install from the forums and It ran both sweep and clam passes over the files and found eicar test virus fine and listed it seperately for each scan engine, Is that what you were really asking?.

Hope it helps,

Gavin.

P.S I have stopped running both at the moment, So I cannot confirm it with RAV for you, Although amavis appears to support it.

Paul Wolsink

Re: RAV and Clam together on 5.5
« Reply #2 on: January 20, 2003, 11:33:43 PM »
Hi Gavin
Yes, indeed that was what I was looking for. Does it mean then that Amavis use RAV and Clam to do the scanning? In the Amavis.conf you have to set up both?

regards
Paul

gavin

Re: RAV and Clam together on 5.5
« Reply #3 on: January 21, 2003, 01:49:21 AM »
The short answer is

Load RAV as per suppliers instructions.

Chech the /etc/amavis/amavis.conf file to ensure the paths are the same as installed by the suppliers copy (Not using RAV myself I can't confirm that)

uncomment the scan engine record for RAV in the amasic.conf file.

A word of warning, Email sends are lots slower using the amavis program as it does an inline scan of the mail from the PC client and will abort the transmission if a virus is detected, This means that the virus never leaves the PC. however the sending of mail can be a bit annoying.

I and a friend have considered placing a middleman server in between the PC and the mail server to speed up the movement of mail. This means more complexity , But would speed things up considerably. (Sounds a bit like servicelink's mail scanning routine doesn't it )

Hope this is of help ,
Regards,
Gav

Paul Wolsink

Re: RAV and Clam together on 5.5
« Reply #4 on: January 22, 2003, 01:02:52 AM »
Hi Gavin
I've tried this, but did'nt work. I had RAV and CLAM in the amavis, but clam works fine and RAV gives me an error that Amavis can't load RAV. Even if it is on it's own. I guess I have to study Amavis a bit. I tried various command lines to load RAV, but to no avail.

But I'll try again tomorrow and post an answer if I find a solution....

regards
Paul