"Jon Rowlan" <[email protected]> a scris: > What would be the preferred and recommended way to use ClamAV with MD? > > They both need to use or have access to a .sock > > So should I run Clam as defang or change perms so that both Clam and > MD can talk to the same directory or indeed move the location of the > Clam AV .sock? > > I would really like to know others ideas of how to make these two hang > together. > > I guess chmod 777 is not a good idea :-)
I have successfully used MIMEDefang with network sockets in such a setup. Being a standard milter filter, MD supports them just fine, just use something like this in the config: SOCKET=inet:[email protected]. When using ClamAV, make sure its local socket is accessible to the user whose credentials you are using to run MIMEDefang. As a side fact, I would not run ClamAV as root as it hangs from time to time and I don't trust it that much. In fact, I have given up on using an AV on the MX servers altogether, just ban the dangerous file extensions like com, exe, pif, lnk etc. and you are good to go. The only notable problem I have encountered since is PDF malware, so make sure you either avoid Adobe Acrobat or use virus protection on Windoze clients. -- mișu
pgpImkQgzla8p.pgp
Description: PGP signature
_______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
