ClamAV - Revision history

Vincent: Update link

2017-04-05T06:00:09Z

Update link

← Older revision		Revision as of 06:00, 5 April 2017
Line 4:		Line 4:

	== Prerequisite ==		== Prerequisite ==
	This article is part of the [[Emails#Complete\|emails]] series. It is assumed that you already covered [[Exim]].		This article is part of the [[Emails/Complete\|emails]] series. It is assumed that you already covered [[Exim]].

	== Install ==		== Install ==

Vincent: Introduction

2017-04-02T15:18:01Z

Introduction

← Older revision		Revision as of 15:18, 2 April 2017
Line 1:		Line 1:
			ClamAV is a cross-platform antivirus. While it is generic and can scan files in many situations, in this guide we will only configure it to scan emails. Using an antivirus on a mail server serve two goals:
			* You wouldn't like you or someone else getting a virus that transited trough your mail server
			* The huge majority of emails containing viruses is actually spam. This makes a great complement to [[Spamassassin]].

			== Prerequisite ==
			This article is part of the [[Emails#Complete\|emails]] series. It is assumed that you already covered [[Exim]].

	== Install ==		== Install ==
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# apt install clamav clamdscan clamav-daemon		$ sudo apt install clamav clamdscan clamav-daemon
	</syntaxhighlight>		</syntaxhighlight>

Line 10:		Line 17:

	Fortunately Sanesecurity provide for free some [http://sanesecurity.com/usage/signatures/ hourly updated databases] that will detect them. Getting them on your system is as simple as<syntaxhighlight lang="console">		Fortunately Sanesecurity provide for free some [http://sanesecurity.com/usage/signatures/ hourly updated databases] that will detect them. Getting them on your system is as simple as<syntaxhighlight lang="console">
	# apt install clamav-unofficial-sigs		$ sudo apt install clamav-unofficial-sigs
	</syntaxhighlight>As the version in Debian is quite [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785130 outdated], it tries by default to download some files that [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783228 don't] [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831607 exist] anymore. This is fixed by creating file <code>/etc/clamav-unofficial-sigs.conf.d/local.conf</code><syntaxhighlight lang="sh">		</syntaxhighlight>As the version in Debian is quite [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785130 outdated], it tries by default to download some files that [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783228 don't] [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831607 exist] anymore. This is fixed by creating file <code>/etc/clamav-unofficial-sigs.conf.d/local.conf</code><syntaxhighlight lang="sh">
	# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783228		# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783228
Line 20:		Line 27:

	== Integrate with Exim ==		== Integrate with Exim ==
	~~You need to have [[Exim]] installed for this.~~

	=== Permissions ===		=== Permissions ===
	The ClamAV daemon is running under user <code>clamav</code>. We need to get this user access to the mail spool for the scan to be possible.<syntaxhighlight lang="console">		The ClamAV daemon is running under user <code>clamav</code>. We need to get this user access to the mail spool for the scan to be possible.<syntaxhighlight lang="console">
	# usermod -a -G Debian-exim clamav		$ sudo usermod -a -G Debian-exim clamav
	# systemctl restart clamav-daemon.service		$ sudo systemctl restart clamav-daemon.service
	</syntaxhighlight>		</syntaxhighlight>

Line 37:		Line 42:
	av_scanner = clamd:/var/run/clamav/clamd.ctl		av_scanner = clamd:/var/run/clamav/clamd.ctl
	</syntaxhighlight>Finally restart Exim<syntaxhighlight lang="console">		</syntaxhighlight>Finally restart Exim<syntaxhighlight lang="console">
	# systemctl restart exim4.service		$ sudo systemctl restart exim4.service
	</syntaxhighlight>		</syntaxhighlight>

	=== Test ===		=== Test ===
	Testing anti-virus software is commonly done using [http://www.eicar.org/83-0-Anti-Malware-Testfile.html EICAR anti malware testfile]. Although this file is not a virus, it will be recognised by all major anti-virus programs. This ~~allow~~ to test them without risking infecting yourself.		Testing anti-virus software is commonly done using [http://www.eicar.org/83-0-Anti-Malware-Testfile.html EICAR anti malware testfile]. Although this file is not a virus, it will be recognised by all major anti-virus programs. This allows you to test them without risking infecting yourself.

	To get the file, simply create a file with the following content<syntaxhighlight lang="text">		To get the file, simply create a file with the following content<syntaxhighlight lang="text">

Vincent: Add Sanesecurity databases

2016-08-05T06:52:22Z

Add Sanesecurity databases

@@ Line 2: / Line 2: @@
 <syntaxhighlight lang="console">
 # apt install clamav clamdscan clamav-daemon
 </syntaxhighlight>

Vincent: Integrate with Exim

2016-07-30T10:05:27Z

Integrate with Exim

@@ Line 3: / Line 3: @@
 # apt install clamav clamdscan clamav-daemon
 </syntaxhighlight>
 [[Category:Email Server]]
 [[Category:Linux Server]]

Vincent: Category: Email Server

2016-04-29T07:16:45Z

Category: Email Server

← Older revision		Revision as of 07:16, 29 April 2016
Line 3:		Line 3:
	# apt install clamav clamdscan clamav-daemon		# apt install clamav clamdscan clamav-daemon
	</syntaxhighlight>		</syntaxhighlight>
			[[Category:Email Server]]
	[[Category:Linux Server]]		[[Category:Linux Server]]

Vincent: Created page with "== Install == # apt install clamav clamdscan clamav-daemon Category:Linux Server"

2016-03-19T20:53:59Z

Created page with "== Install == <syntaxhighlight lang="console"> # apt install clamav clamdscan clamav-daemon </syntaxhighlight> Category:Linux Server"

New page

== Install ==
<syntaxhighlight lang="console">
# apt install clamav clamdscan clamav-daemon
</syntaxhighlight>
[[Category:Linux Server]]