Antivirus and Anttisapm

kowell · Post by **kowell** » Tue Jun 13, 2006 10:34 am

How can be added more supoort to the antivurus, for example to enable .rar support

is there aan easy way to edit antivirus and antispam conguration??
this are the configs that seems to be running in my server
Log file size limited to 20971520 bytes.

ngth to 15

Archived file size limit set to 104857600 bytes.

Recursion level limit set to 8.

Archive: Files limit set to 1000.

Archive: Compression ratio limit set to 250.

Archive: RAR support disabled.

Portable Executable support enabled.

Mail files support enabled.

OLE2 support enabled.

HTML support enabled.
are there many more features that can be enable??

rsharpe · Post by **rsharpe** » Tue Jun 13, 2006 11:57 am

I think you just need the supported libraries for you server to inspect them. For example if you install rar support onto server using yum, up2date, apt-get or which ever. Amavis and ClamAV should them be able to inspect that type of file.

kowell · Post by **kowell** » Tue Jun 13, 2006 11:59 am

indeed I have install rar support but i dont know how to enable it

ecactive · Post by **ecactive** » Tue Jun 13, 2006 12:45 pm

I believe that to enable RAR support you must uncomment the ScanRAR directive in the clamd.conf file.
Also I believe you will find that only RAR 2.0 type files are supported. I know that this was the case. There was licensing restrictions preventing the support for 3.0 type files.

kowell · Post by **kowell** » Tue Jun 13, 2006 12:57 pm

thanks

after I change the line for rar support should stop clam or jsut edit and then restart the deamon???

ecactive · Post by **ecactive** » Tue Jun 13, 2006 1:05 pm

I would personally stop amavis/clam then modify the config and restart.
I don't think you will have any problems just restarting the daemon, but not something I have attempted.
At the end run zmcontrol status and make sure that antivirus has come back up.

kowell · Post by **kowell** » Tue Jun 13, 2006 1:10 pm

have you enable the rar support?? if does??? it work good???

ecactive · Post by **ecactive** » Tue Jun 13, 2006 1:14 pm

No, I have not enabled RAR support. It is something I have considered in the past and it is something that some clients have asked about, however, due to the lack of support for RAR 3.0 it seemed to be a "half-there" solution which did not really address the requirements of our clients.
In the end some decided to allow their corporate AV solutions to scan the rar files, and some decided to block rar attachments completely.
As such, we haven't had a reason to look into it recently, so I don't know if support for rar files has been improved at all.

kowell · Post by **kowell** » Tue Jun 13, 2006 1:25 pm

have you add some special features to the ClamAV the will the usefull to the server??

there some of the features i dont really know what they do