Leo Baltus schrieb:
> Op 22/08/2007 om 12:49:43 +0200, schreef Mark Martinec:
>> Thomas,
>>
>> > how do I set up amavis to use a clamav running on a different
>> > server? I have:
>> >
>> > ['Clam Antivirus-clamd',
>> > \&ask_daemon, ["CONTSCAN {}\n", "192.168.44.14:3310"],
>> > qr/\bOK$/, qr/\bFOUND$/,
>> > qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
>> >
>> > calmav is set up to listen on port 3310 using interface 192.168.44.14.
>> >
>> > I can send a file to clamav and I receive an answer, but amavis does
>> > not seem to send a file. Any hint welcome!
>>
>> I don't think it is possible, at least not directly.
>>
>> The protocol between clamd and its client (such as amavisd)
>> sends a request containing a file or directory NAME to the server,
>> and receives a response. Although clamd could in principle be
>> on another host, it needs to have access to a submitted file
>> under the same name as indicated in the request. This might
>> be possible by the use of a NFS mount, or doing some explicit
>> file transfer to the clamd host before issuing a CONTSCAN request,
>> although it seems more trouble than is worth.
>>
>> Extending the clamd protocol might be an option, although
>> not very appealing, as it would involve yet another file transfer,
>> instead of just passing a path name to a file.
>>
>
> I think it is already in de clamd protocol, as i understand it from the
> man clamd page:
>
> STREAM Scan stream - on this command clamd will return "PORT
> number" you should connect to and send data to scan.
This was my understanding too. But since it didn't work ...
> It's just not implementend in amavisd, I think. It could be useful as a
> backup scanner, although I would rather not see an extra port opening up
> (looks like ftp, yuck!) but something in the protocol in the current
> sesion (like DATA in smtp, or POST in http)
If it is not implemented in amavisd at the moment, would it be
possible to move the whole amavisd including all scanners to an
extra machine? Any hint or howto welcome!
I'd like to move this from the real mail server to some other
hardware since I want to use the scanners from different servers not
having to worry about various scanner installs.
--
Thomas
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
