Slow response

[till]

Have you tested your solution with the eicar virus test pattern and does it really filter viruses? You need a running clamd daemon for this and I do not see where you configuare and start clamd automatically as ISPConfig does not ahs a clamd daemon.

[Morons]

cjc81, Althow there is an clamd script installed with the ispconfig (comes with clamassasin) it require and clamd daemon to be running.

updatedb
locate clamd
ps ax |grep clamd

check whether the daemon is running, as till sais use eicar test!
If not running switch on the yum installed clamd daemon and change the config to use it according to the locate you did above.

[Morons]

I would like to ask ISPConfig to perhaps consider using clamd instead of clamscan by default. I only relised now that I had to upgrade hardware on 2 other installs before this that would have been unnessesary if we switched!
Maybe add an option to switch the two methods.

[cjc81]

Yes sir, i tried the test pattern and the mail got filtered out. (ie. its working properly)

Also, clamd daemon is running. Do i need to add that to chkconfig to make sure that clamd daemon is running when system starts?

I am also monitoring my running processes via "top". I only see clamd coming active there are mail activities.

[Morons]

Originally Posted by cjc81

Yes sir, i tried the test pattern and the mail got filtered out. (ie. its working properly)

Also, clamd daemon is running. Do i need to add that to chkconfig to make sure that clamd daemon is running when system starts?

I am also monitoring my running processes via "top". I only see clamd coming active there are mail activities.

Yes this is were the issue comes in. Currently you have 2 installations of clamd, one installev via ISPC / clamassasin part and one using yum, Also 2 x freshclam. each updating its database residing in diferent places.
Now, that being the case the versions might be diffrent! also make sure the you inspect the headers of an mail comming through to see the scan successfull! I have this in my header. The No mean there is no virus found!

X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / ClamAV 0.90.2/3334/Thu May 31 10:54:25 2007

Not all distro's have the chkconfig command, it seems to be maintained by the "redhat" derivatives and yes to make sure the yum installed version is running use

chkconfig clamd on

The ISPC version will not start automatically, if my analysis is correct. Till can perhaps comment on this.

[cjc81]

I was wondering if i could copy /home/admispconfig/ispconfig/tools/clamav/sbin/clamd
to
/etc/init.d
then add it to chkconfig to get it to run when system start?

[till]

Originally Posted by cjc81

I was wondering if i could copy /home/admispconfig/ispconfig/tools/clamav/sbin/clamd
to
/etc/init.d
then add it to chkconfig to get it to run when system start?

This will not work because in /etc/init.d are the start scripts for the daemins and not the daemin binaries itself. If you want to run the clamd daemon /home/admispconfig/ispconfig/tools/clamav/sbin/clamd, you will have to craete a start script for it in /etc/init.d.

[plucchetti]

clamd.amavisd is the same as clamd???

[cjc81]

Originally Posted by till

This will not work because in /etc/init.d are the start scripts for the daemins and not the daemin binaries itself. If you want to run the clamd daemon /home/admispconfig/ispconfig/tools/clamav/sbin/clamd, you will have to craete a start script for it in /etc/init.d.

Ah i c.

Thanks. I second Morons's suggestion of havig CLAMD being used as default in ISPCONFIG.

[XPinG]

Hi all, I post my little contribution on how I did on my FC5 server

first I followed the steps posted by cjc81 (thanx man) then :

I enabled logging in /home/admispconfig/ispconfig/tools/clamav/etc/clamd.conf

LogFile /var/log/clamd.log

I created and changed the owner of the log file to admispconfig

touch /var/log/clamd.log
chmod admispconfig.admispconfig /var/log/clamd.log

I've put a starting script in /etc/init.d/clamd that I hacked to run the clamd from ispconfig

#!/bin/sh
#
# clamd         Script to start/stop clamd.
#
# chkconfig:    - 61 39
# description:  clamd is an antivirus daemon.
#
# processname: clamd
# config: /home/admispconfig/ispconfig/tools/clamav/etc/clamd.conf
# pidfile: /var/run/clamd.pid
#
# Source function library
. /etc/rc.d/init.d/functions
# Get network config
. /etc/sysconfig/network
#
test -f /home/admispconfig/ispconfig/tools/clamav/etc/clamd.conf || exit 0
#
RETVAL=0
#
start() {
       echo -n $"Starting Clam AV daemon: "
       daemon /home/admispconfig/ispconfig/tools/clamav/sbin/clamd
       RETVAL=$?
       echo
       [ $RETVAL -eq 0 ] && touch /var/lock/subsys/clamd
       return $RETVAL
}
#
stop() {
       echo -n $"Stopping Clam AV daemon: "
       killproc clamd
       RETVAL=$?
       echo
       [ $RETVAL -eq 0 ] && rm -f /var/run/clamd.pid /var/lock/subsys/clamd
       return $RETVAL
}
#
restart() {
       stop
       start
}

reload() {
       echo -n $"Reloading DB: "
       killproc clamd -USR2
       RETVAL=$?
       echo
       return $RETVAL
}
#
case "$1" in
 start)
       start
       ;;
 stop)
       stop
       ;;
 status)
       status clamd
       ;;
 restart)
       restart
       ;;
 condrestart)
       [ -f /var/lock/subsys/clamd ] && restart || :
       ;;
 reload)
       reload
       ;;
 *)
       echo $"Usage: $0 {start|stop|status|restart|condrestart|reload}"
       exit 1
esac
#
exit $?

and execute

chmod 700 /etc/init.d/clamd
chkconfig --add clamd
chkconfig --level 2345 clamd on
service clamd start