Hylton Conacher (ZR1HPC) wrote:
Hi,
Looking at the Alt-Ctrl-F10 tty I see that anavis is warning that 'all
primary virus scanners failed, considering backups'
What should I do to rectify this problem i.e. I assume update amavisd,
but how, at least via YAST?
Amavisd-new is only the framework, that is calling the virus scanner. You
should install at least clam-av. Please take care to update the signatures
with fresh-clam frequently (at least once a day).
Usually you set up the daemon version clamd as primary scanner and, in case
the daemon is unavailable the commandline version clam-scan as fallback in
backup-scanners.
I think I had to change the configuration a bit to make it work with clamd.
In /etc/amavisd.conf you should find the following lines:
@av_scanners = (
#[...delete additional comments...]
# ### http://www.clamav.net/
['Clam Antivirus-clamd',
\&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd"],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd; match the s
# # name (LocalSocket) in clamav.conf to the socket name in this entry
# # When running chrooted one may prefer: ["CONTSCAN {}\n","$MYHOME/clamd"],
#[...deleted even more uninstalled scanners...]
);
@av_scanners_backup = (
# If no virus scanners from the @av_scanners list produce 'clean' nor
# 'infected' status (e.g. they all fail to run or the list is empty),
# then _all_ scanners from the @av_scanners_backup list are tried.
# When there are both daemonized and command-line scanners available,
# it is customary to place slower command-line scanners in the
# @av_scanners_backup list. The default choice is somewhat arbitrary,
# move entries from one list to another as desired.
### http://www.clamav.net/
['Clam Antivirus - clamscan', 'clamscan',
'--stdout --no-summary -r {}', [0], [1],
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# [...deleted again uninstalled scanners...]
);
--
Sandy
List replies only please!
Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
