Also important difference ClamDScan vs. ClamScan. You really do NOT want to use ClamScan, as this means youll be reinitializing/reloading the Virus Signature database every single time before that ONE email can be scanned. On a busy mail server, at peak period, this could potentially cause emails to start queuing up big time.
You want to set up ClamD, so that the virus signature database is loaded during system startup by a service, and that service will keep the database up to date throughout the day. ClamDScan will then pass the path of the email to be scanned to the service, which will start scanning without delay. From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Saturday, November 26, 2016 4:16 AM To: community@mailsbestfriend.com Subject: [MBF] AW: ClamAV Hi Martin We use SCANFILE1 C:\ClAV\ClamDScan.exe --quiet --no-summary -l report.txt VIRUSCODE1 1 REPORT1 . Its long time ago, but I remember that the command line paths shouldnt be too long, as then called there will be added also the entire path to the Dxxxxxx.smd file in the spool/proc path. Also I remember that there are different ports of ClamAV, and my command line looks like Im using a different one then you: https://github.com/clamwin/clamav-win32 Markus Von: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> [mailto:community@mailsbestfriend.com] Im Auftrag von Martin Schaible Gesendet: Freitag, 25. November 2016 22:59 An: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> Betreff: [MBF] ClamAV Hello I like to run ClamAV as a second virus scanner Entries in the file virus.cfg # CLAMAV SCANFILE D:\SmarterMail\Declude\Scanners\ClamAV\clamscan.exe --database="D:\SmarterMail\Declude\Scanners\ClamAV\Database" --tempdir="D:\SmarterMail\Declude\Scanners\ClamAV\Temp" --log="D:\SmarterMail\Logs\ClamAV\clamd.log" --move="D:\SmarterMail\Quarantine" --quiet --no-summary --verbose VIRUSCODE 1 I tested this on the command line by adding a copied mail at the end: SCANFILE D:\SmarterMail\Declude\Scanners\ClamAV\clamscan.exe --database="D:\SmarterMail\Declude\Scanners\ClamAV\Database" --tempdir="D:\SmarterMail\Declude\Scanners\ClamAV\Temp" --log="D:\SmarterMail\Logs\ClamAV\clamd.log" --move="D:\SmarterMail\Quarantine" --quiet --no-summary verbose D:\Temp\foobar.eml This worked out very well. Declude can not do it. I got this message in the virus log of declude: 11/25/2016 22:53:10.991 -616085515090 Error 87 starting scanner [ D:\SMARTE~1\Spool\proc\work\-61608~1.VIR\]; NOT SCANNING ATTACHMENTS! Error String: [Falscher Parameter.] 11/25/2016 22:53:10.991 -616085515090 Scanned: Error starting scanner I also tried to work with the old 8.3 Path names like D:\Smarte~1\... Any idea, why declude can not start the scanner? Many Thanks Freundliche Grüsse ---------------------------------------------------------------------------- ---------- netfusion GmbH | Martin Schaible Mittelfeldstrasse 27 | CH-8700 Küsnacht | Switzerland Tel.: +41 44 585 22 54 E-Mail: <mailto:mar...@netfusion.ch> mar...@netfusion.ch Internet: <http://www.netfusion.ch/> www.netfusion.ch Helpdesk und Community: <http://portal.netfusion.ch/> portal.netfusion.ch Wir sind auch auf Facebook präsent: <http://www.facebook.com/NetfusionGmbH> www.facebook.com/NetfusionGmbH ---------------------------------------------------------------------------- ----------
