Go to file
Orion Poplawski 64dd88751b Move /etc/clamd.d/scan.conf to clamav-filesystem
Add clamonacc.service
2020-05-07 06:25:19 +01:00
.gitignore Upgrade to 0.100.0 (#1565381) 2018-05-29 02:43:26 +02:00
ChangeLog-rpm.old - updated to 0.96.1 2010-06-01 19:22:07 +00:00
clamav-0.99-private.patch Upgrade to 0.99 and updated daily.cvd (#1287327) 2015-12-02 01:46:49 +01:00
clamav-clean.sh Add conditional old_freshclam 2020-02-09 22:03:38 +00:00
clamav-curl.patch Add patch to build with EL7 libcurl - re-enable on-access scanning 2020-05-07 06:25:19 +01:00
clamav-default_confs.patch Update to 0.102.2 2020-02-09 15:44:46 -07:00
clamav-milter.systemd Also fix type of clamav-milter.service 2018-01-17 20:49:23 +00:00
clamav-stats-deprecation.patch Update to 0.102.2 2020-02-09 15:44:46 -07:00
clamav-update.crond Re-add clamav-update.cron (bz#1800226) 2020-02-09 13:59:59 -07:00
clamav-update.logrotate Add missingok to clamav-update.logrotate (bz#1807701) 2020-02-29 10:12:20 -07:00
clamav.spec Move /etc/clamd.d/scan.conf to clamav-filesystem 2020-05-07 06:25:19 +01:00
clamd-README Drop clamd@scan.service file (bz#1725810) 2019-11-18 20:49:22 -07:00
clamd.logrotate clean whitespace 2018-09-24 02:45:07 +01:00
clamd@.service Drop clamd@scan.service file (bz#1725810) 2019-11-18 20:49:22 -07:00
clamonacc.service Move /etc/clamd.d/scan.conf to clamav-filesystem 2020-05-07 06:25:19 +01:00
freshclam-sleep Quiet freshclam-sleep when used with proxy 2020-03-16 08:45:58 -06:00
freshclam.sysconfig Re-add clamav-update.cron (bz#1800226) 2020-02-09 13:59:59 -07:00
package.cfg "Adding package.cfg file" 2019-08-03 15:02:41 +02:00
README.fedora Drop clamd@scan.service file (bz#1725810) 2019-11-18 20:49:22 -07:00
sources Update to 0.102.2 2020-02-09 15:44:46 -07:00

Please note for Fedora and EPEL 7+ we use only systemd.
upstart and sysvinit only apply to EPEL 6.

A clamav-milter setup consists of the following three components:

* the clamav-milter itself

  --> this is provided by the 'clamav-milter' package plus (alternatively)
      'clamav-milter-upstart' or 'clamav-milter-sysvinit'

  The main configuration is in /etc/mail/clamav-milter.conf and MUST
  be changed before first use.

  This can be enabled with: 'systemctl enable clamav-milter.service'

  The -sysvinit package is managed by the traditional tools, but
  -upstart requires modification of /etc/event.d/clamav-milter to
  enable automatic startup.  See comments there for more details.

* a clamav scanner daemon

  --> this is in the clamd package (or on EL6:
      'clamav-scanner-upstart' or 'clamav-scanner-sysvinit')

  The daemon is configured by /etc/clamd.d/scan.conf (which MUST be
  edited before first use).

  This can be enabled with: 'systemctl enable clamd@scan.service'

  The -sysvinit package is managed by the traditional tools, but
  -upstart requires modification of /etc/event.d/clamd.scan to enable
  automatic startup.  See comments there for more details.

* the MTA (sendmail/postfix)

  --> you should know how to install this...

  When communicating across unix sockets with the clamav-milter, it is
  suggested to use the /run/clamav-milter/clamav-milter.socket
  path.  You have to add something like

    INPUT_MAIL_FILTER(`clamav', `S=local:/run/clamav-milter/clamav-milter.socket, F=, T=S:4m;R:4m')dnl

  to your sendmail.mc.


EXAMPLE
=======

For clamav-milter, a possible setup might be created by

A)  On the MTA  (assumed hostname 'host-mta')

  1. Add to sendmail.mc

    | INPUT_MAIL_FILTER(`clamav', `S=inet:6666@host-milter, F=, T=S:4m;R:4m')dnl

  2. Rebuild sendmail.cf


B)  On the clamav-milter host (assumed hostname 'host-milter')

  1. Install clamav-milter + clamav-milter-upstart packages

  2. Set in /etc/mail/clamav-milter.conf

    | MilterSocket	inet:6666
    | ClamdSocket	tcp:host-scanner:6665

     and all the other options which are required on your system

  3. Enable clamav-milter.service:

    | systemctl enable clamav-milter.service

     Restart your system or execute

    | systemctl start clamav-milter.service

  4. Add something like

    | iptables -N IN-cmilt
    | iptables -A IN-cmilt -s host-mta -j ACCEPT
    | iptables -A IN-cmilt -j DROP

    | iptables -A INPUT -p tcp --dport 6666 -j IN-cmilt

     to your firewall setup

C)  On the clamav-scanner host (assumed hostname 'host-scanner')

  1. Install clamd

  2. Add to /etc/clamd.d/scan.conf

    | TCPSocket 6665
    | TCPAddr   host-scanner

     comment out possible 'LocalSocket' lines and set all the other
     options which are required on your system

  3. Enable clamd@scan.service:

    | systemctl enable clamd@scan.service

     Restart your system or execute

    | systemctl start clamd@scan.service

  4. Add something like

    | iptables -N IN-cscan
    | iptables -A IN-cscan -s host-milter -j ACCEPT
    | iptables -A IN-cscan -j DROP

    | iptables -A INPUT -p tcp --dport 6665 -j IN-csan

     to your firewall setup