Op 22/08/2007 om 12:49:43 +0200, schreef Mark Martinec:
> Thomas,
> 
> > how do I set up amavis to use a clamav running on a different
> > server? I have:
> >
> >  ['Clam Antivirus-clamd',
> >    \&ask_daemon, ["CONTSCAN {}\n", "192.168.44.14:3310"],
> >    qr/\bOK$/, qr/\bFOUND$/,
> >    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
> >
> > calmav is set up to listen on port 3310 using interface 192.168.44.14.
> >
> > I can send a file to clamav and I receive an answer, but amavis does
> > not seem to send a file. Any hint welcome!
> 
> I don't think it is possible, at least not directly.
> 
> The protocol between clamd and its client (such as amavisd)
> sends a request containing a file or directory NAME to the server,
> and receives a response. Although clamd could in principle be
> on another host, it needs to have access to a submitted file
> under the same name as indicated in the request. This might
> be possible by the use of a NFS mount, or doing some explicit
> file transfer to the clamd host before issuing a CONTSCAN request,
> although it seems more trouble than is worth.
> 
> Extending the clamd protocol might be an option, although
> not very appealing, as it would involve yet another file transfer,
> instead of just passing a path name to a file.
> 

I think it is already in de clamd protocol, as i understand it from the
man clamd page:

       STREAM Scan stream - on this command clamd will return "PORT
       number" you should connect to and send data to scan.

It's just not implementend in amavisd, I think. It could be useful as a
backup scanner, although I would rather not see an extra port opening up
(looks like ftp, yuck!) but something in the protocol in the current
sesion (like DATA in smtp, or POST in http)

-- 
Leo Baltus, internetbeheerder                         /\
NPO ICT Internet Services                            /NPO/\
Sumatralaan 45, 1217 GP Hilversum, Peperbus (12.103) \  /\/
[EMAIL PROTECTED], 035-6773555                         \/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to