Okay, I've been a bit out of touch lately, so here we go... Yes, turns out the AVP version I was running was horribly out of date. Now I've figured out how to use kavdaemon 4.0.3.1 with Q-S. But first, a little background:
The good: * Kaspersky's linux client is great at doing it's job, once you set it up correctly. * kavdaemon is FAST, incredibly fast, very accurate and feature-filled (can scan mbox groups, parse mime, read a couple dozen types of compressed files, etc). I've actually commented out &deconstruct_msg in q-s to save time; all it does now is scan the one mime message. * Virus updates are very up-to-date. It caught bugbear.b (tanatos) on one of my machines almost immediately after it was out in the wild. * It's relatively cheap, and they give free trials if you ask. And the bad: * The universal installer is crap. I just end up extracting the tarball and manually moving stuff around. * They have a tendency to change stuff around (flags, etc) whenever they feel like it. Most people have seemed to give up on the daemon because of this, but not I. * Documentation is often misleading. * Logging is not too verbose. Now, how to actually use kavdaemon. Start kavdaemon by doing: /opt/AVP/kavdaemon -I0 -Y /var If you want to be able to scan more directories beside /var through the daemon, you can edit /opt/AVP/etc/defUnix.prf and put the directories that you want under Object->Names, then just do "/opt/AVP/kavdaemon -I0 -Y" instead. Be sure to prefix the directory with a *, which says the directory is "enabled". Oh, and this took me awhile to figure out -- "/" will NOT be accepted in either location as a valid allowable directory. If you want kavdaemon to be able to scan anywhere on the filesystem, you must specify all of the top-level directories in defUnix.prf. Yes, it's annoying. Personally though, I just use the virus scanner on mail servers, so /var is the only directory I need to scan within, so it works out. As for q-s itself, here's a modified version of the code I first released: http://www.finnie.org/stuff/q-s_avpdaemon.txt Once this is set up, the scans are fast... average 2 seconds per message. RF ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
