1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice

clamav.net files differ from Art's clamav

Discussion in 'Plesk for Linux - 8.x and Older' started by modom, Jan 26, 2005.

  1. modom

    modom Guest

    0
     
    When I first installed clamav from http://www.clamav.net/ I had different files and 2 crons setup like:
    /usr/local/sbin/insert_odeiavir.cgi >/dev/null 2>&1
    /usr/local/bin/freshclam --quiet -l /var/log/clam-update.log

    Also, I would get an email each day of virus removals and I could see the update log, cat /var/log/clam-update.log

    The listings in /usr/local/bin on the regular install are also different:
    Clam Scan:
    /usr/local/bin

    -rwxr-xr-x 1 root root 45184 Apr 4 15:57 clamdscan
    -rwxr-xr-x 1 root root 65714 Apr 4 15:57 clamscan
    -rwxr-xr-x 1 root root 59112 Apr 4 15:57 freshclam
    -rwxr-xr-x 1 root root 46292 Apr 4 17:43 ripmime
    -rwxr-xr-x 1 root root 46982 Apr 4 15:57 sigtool

    When I installed Art's clamav I do not have the same files or the same abilities.

    Are crons needed on Art's like above?

    Is there a way to test for the virus like:
    /var/qmail/bin/qmail-inject emailaddress@yourdomain.com < sampl-virus.txt

    Before I would edit the /etc/odeiavir file for an email to send the confirmation of removed viruses to.

    Am on centOS with plesk 7.5.1 reloaded.

    I'm trying to understand the difference between a regular install of clamav from clamav.net and atomicrocketturtle.com?

    Thanks!
     
  2. atomicturtle

    atomicturtle Golden Pleskian

    29
     
    Joined:
    Nov 20, 2002
    Messages:
    2,110
    Likes Received:
    7
    Location:
    Washington, DC
    Mine works with PSA on theres doesnt :p
     
  3. modom

    modom Guest

    0
     
    Hi,

    I was getting the emails showing it was working with plesk on my server. Am I missing something?

    Do I need to setup any crons to keep the virus database up to date?
     
  4. atomicturtle

    atomicturtle Golden Pleskian

    29
     
    Joined:
    Nov 20, 2002
    Messages:
    2,110
    Likes Received:
    7
    Location:
    Washington, DC
    Depends on how you implemented it, you dont really have to scan a unix box for virii, since it isnt really vulnerable to them. Generally people are using A/V scanners on incoming/outgoing email. Mine is set up to maintain itself, and when combined with something like qmail-scanner, will scan mail.
     
  5. modom

    modom Guest

    0
     
    Ok.

    Now, tonight it started again where I nor my clients are able to receive emails.

    I removed the qmail scanner...is there something with the install and removal that would allow your mail to work most of the day and then stop suddenly?

    Thanks!
     
  6. atomicturtle

    atomicturtle Golden Pleskian

    29
     
    Joined:
    Nov 20, 2002
    Messages:
    2,110
    Likes Received:
    7
    Location:
    Washington, DC
    clamav, when it fails, doesnt fail safely. So if its tied into a content scanner, then the content scanner will fail too. That would (unlike SA, which fails safe) cause an outage
     
  7. modom

    modom Guest

    0
     
    How can I fix it?
     
  8. atomicturtle

    atomicturtle Golden Pleskian

    29
     
    Joined:
    Nov 20, 2002
    Messages:
    2,110
    Likes Received:
    7
    Location:
    Washington, DC
    That not being my package, its hard to say
     
Loading...