Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: ryan on February 01, 2004, 12:51:10 AM

Title: ClamAV Question
Post by: ryan on February 01, 2004, 12:51:10 AM

I have SME 5.6 infront of Exchange to filter for spam.  Exchange is the delegate mail server and there are no user accounts on this SME server.

I want to test ClamAV on SME.  Will it work when a delegate mail server is defined?  

Ryan

Title: ClamAV Question
Post by: shanen on February 01, 2004, 01:00:04 AM

It works so well that you will wonder how you did without it...

Title: ClamAV Question
Post by: Anonymous on February 01, 2004, 01:08:57 AM

I concur - its amazing. Stopped mydoom recently when all our paid enterpise solutions failed.

Title: ClamAV Question
Post by: ryan on February 01, 2004, 01:14:23 AM

Does ClamAV update its virus definition tables by itself?  

I only ask since you guys respond so quickly...faster than looking it up on the ClamAV web site.   :roll:

ryan

Title: ClamAV Question
Post by: pete on February 01, 2004, 01:59:29 AM

Yep - what virus scanner doesnt?

Mine is set to hourly, you will be surprised how often it gets updated, more often than our enterprise products, etrust, nav, sav etc

Title: ClamAV Question
Post by: ryan on February 01, 2004, 02:31:01 AM

Thanks for the quick replies.....The auto update meant to ask about FREE auto updates versus a subscription for updates/support.

I also use the smtpfront with built in rbl filtering.  Will this work with ClamAv?  

Is this install script solid enough to run on a live production server?  (I will do a backup to file first)......

ryan

Title: ClamAV Question
Post by: pete on February 01, 2004, 04:28:42 AM

Its FREE! everything about is it FREE.

I know nothing of the other products you want to use, but i use it with Mailscanner (would anything else for serious mails scanning), its used to scan mail for 2 domains, around 2500 messages per day...its solid.

Title: ClamAV Question
Post by: shanen on February 01, 2004, 07:05:37 AM

Set a cron job to update virus definitions hourly.
Denying mail from rbl's can be dangerous but you are probably already aware of that...
I use Spam Assassin and set a custom (higher) score for positive rbl lookups to guarantee tagging and filter on that rule. At least I can have a look at what has been denyed to end users.
If you need help, then it is all here and waiting...

Title: ClamAV Question
Post by: Boris on February 01, 2004, 08:41:58 AM

Quote from: "ryan"

I only ask since you guys respond so quickly...faster than looking it up on the ClamAV web site.
ryan

You won’t get spoiled and use this forum instead of reading the manuals, will you?

Title: ClamAV Question
Post by: cosy2 on February 01, 2004, 09:42:47 AM

Can someone please tell me step to update my Clam Antivirus daily or hourly.

Title: ClamAV Question
Post by: Mick on February 02, 2004, 02:43:40 PM

If you used Jesper Knudsen's script to install ClamAV and Amavis, it is probably getting updated hourly already (assuming you a connected to the net 24 hrs a day).

If not, that script might be a good place to start:

http://sme.swerts-knudsen.dk/howtos

Title: Anti Virus
Post by: tymiles on February 02, 2004, 10:38:23 PM

I am using the Dungog.net panel for ClamAV, H+bedv and amavis. It's $35 but worth every penny. I have all of those installed and it is catching everything. And what Clam does not get H+bedv will and vice versa.

Check dungog out here. http://www.dungog.net/sme/help/

Go to www.dungog.net to purchase if you like it.

They also give you more simple directions to set up the stuff then what is on http://sme.swerts-knudsen.dk/ (You can get the RPM's on dungog also to make the install quicker even if you don't buy the panel)

Title: ClamAV Question
Post by: cosy on February 03, 2004, 05:25:44 AM

Step-by-step guide for install of the AV addon:

<pre>
1. rpm -Uvh clamav-0.62-2.i386.rpm
2. mkdir perl
3. cp 16perl&archive-rpms.zip perl/
4. cd perl/
5. unzip 16perl&archive-rpms.zip
6. rpm -Uvh perl*
7. rpm -Uvh arc*
   rpm -Uvh lha*
   rpm -Uvh unarj*
   rpm -Uvh unrar*
   rpm -Uvh zoo*
[or 6+7. rpm-Uvh *.rpm ??]
8. rpm -Uvh qmail-bsmtp-0.1-1.noarch.rpm
9. rpm -Uvh amavis-ng-0.1.6.4-03dc.noarch.rpm
10. rpm -Uvh dungog-antivirus-0.1.6-6.noarch.rpm
11. http://yourserver/server-manager to finish off configuration options

is this mean do i need to buy this software? Look to me pannel also there.

Title: Another ClamAV question
Post by: ryan on February 05, 2004, 04:47:48 PM

I have ClamAV working on a test system.

If ClamAV is installed on SME 5.6 what will happen when I upgrade to 6.0.1(once released).  Is there a script to remove ClamAV so it can be reinstalled on the upgraded server or will the 6.0.1 upgrade process make the necessary changes?

ryan