Mailing List Archive: ClamAV: users

Need help with additional setup

Index | Next | Previous | View Threaded

jonnt at taylortelephone

Jun 17, 2009, 11:03 AM

Post #1 of 4 (814 views)
Permalink

Need help with additional setup

I have been using clamav for several years and its been working well.
Recently a lot of emails have been getting though with virus's and
trojan's. I am using CommuniGate Pro with the CGPAV filter to send the
email to be scanned. Are there and additional databases or configuration
that I could add to help?

##
## Mail files
##

# Enable internal e-mail scanner.
# Default: yes
ScanMail yes

# If an email contains URLs ClamAV can download and scan them.
# WARNING: This option may open your system to a DoS attack.
# Never use it on loaded servers.
# Default: no
#MailFollowURLs no

# With this option enabled ClamAV will try to detect phishing attempts
by using
# signatures.
# Default: yes
PhishingSignatures yes

# Scan URLs found in mails for phishing attempts using heuristics.
# Default: yes
PhishingScanURLs yes

# Always block SSL mismatches in URLs, even if the URL isn't in the
database.
# This can lead to false positives.
#
# Default: no
#PhishingAlwaysBlockSSLMismatch no

# Always block cloaked URLs, even if URL isn't in database.
# This can lead to false positives.
#
# Default: no
#PhishingAlwaysBlockCloak no

--
Jonn Taylor

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

sarocet at gmail

Jun 17, 2009, 1:24 PM

Post #2 of 4 (763 views)
Permalink

Re: Need help with additional setup [In reply to]

Jonn Taylor wrote:
> I have been using clamav for several years and its been working well.
> Recently a lot of emails have been getting though with virus's and
> trojan's. I am using CommuniGate Pro with the CGPAV filter to send the
> email to be scanned. Are there and additional databases or configuration
> that I could add to help?
>

You could add sanesecurity databases.
http://www.sanesecurity.co.uk/databases.htm

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

jonnt at taylortelephone

Jun 17, 2009, 2:17 PM

Post #3 of 4 (744 views)
Permalink

Re: Need help with additional setup [In reply to]

Thanks, will give that a try.

Jonn Taylor

Sarocet wrote:
> Jonn Taylor wrote:
>
>> I have been using clamav for several years and its been working well.
>> Recently a lot of emails have been getting though with virus's and
>> trojan's. I am using CommuniGate Pro with the CGPAV filter to send the
>> email to be scanned. Are there and additional databases or configuration
>> that I could add to help?
>>
>>
>
> You could add sanesecurity databases.
> http://www.sanesecurity.co.uk/databases.htm
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

jonnt at taylortelephone

Jun 17, 2009, 3:03 PM

Post #4 of 4 (762 views)
Permalink

Re: Need help with additional setup [In reply to]

After I added the extra databases I am getting this in the logs.

Jun 17 16:55:59 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130017.msg
Jun 17 16:56:44 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130021.msg
Jun 17 16:57:01 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130024.msg
Jun 17 16:57:01 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130023.msg
Jun 17 16:57:16 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130014.msg
Jun 17 16:58:01 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130018.msg
Jun 17 16:58:15 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130025.msg
Jun 17 16:58:29 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130026.msg
Jun 17 17:00:28 mail clamd[19697]: SelfCheck: Database status OK.
Jun 17 17:00:28 mail clamd[19697]: lstat() failed on: /var/CommuniGate/Queue/3130027.msg

Jonn Taylor

Taylor Telephone Systems, Inc
8334 Argenta Trail
Inver Grove Heights, MN 55077

651-454-5866 Office
651-245-4836 Cell
651-683-4002 Office
http://www.taylortelephone.com/

Jonn Taylor wrote:
> Thanks, will give that a try.
>
> Jonn Taylor
>
>
>
>
>
> Sarocet wrote:
>
>> Jonn Taylor wrote:
>>
>>
>>> I have been using clamav for several years and its been working well.
>>> Recently a lot of emails have been getting though with virus's and
>>> trojan's. I am using CommuniGate Pro with the CGPAV filter to send the
>>> email to be scanned. Are there and additional databases or configuration
>>> that I could add to help?
>>>
>>>
>>>
>> You could add sanesecurity databases.
>> http://www.sanesecurity.co.uk/databases.htm
>>
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
>>
>>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads