[clamav-users] FW:

[Al Varnell]

On Wed, Apr 25, 2018 at 03:53 AM, Richard Tappenden wrote:
> Hey guys - can you answer a couple of questions? 
> 
> Can we configure clamd to scan *any* file type/extension, or does it only scan certain ones? 

There are a very few that are excluded, those where infections have never been reported. I believe these to be the only ones:

daily.ftm (IGNORED)
0:0:2e524d46:Real Media File:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:48692e20546869732069732074686520716d61696c2d73656e64:Qmail bounce:CL_TYPE_ANY:CL_TYPE_MAIL
0:0:494433:MP3:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:4f676753:Ogg Stream:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:fffb90:MP3:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:5349502d48495420285349502f48:SIP log:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:53594d430100:SYM DATFILE:CL_TYPE_ANY:CL_TYPE_IGNORED
1:0,128:2f5247420a49440affffffffffffffffffffffffffffffffffffffffffffffff:PDF image:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:377f0682002de218:SQLite WAL:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:377f0683002de218:SQLite WAL:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:53514c69746520666f726d6174203300:SQLite database:CL_TYPE_ANY:CL_TYPE_IGNORED
0:0:d9d505f920a163d7:SQLite journal:CL_TYPE_ANY:CL_TYPE_IGNORED

> Can we increase max size beyond 4gb? 

Possibly, if you have sufficient RAM to accommodate it, but as clearly announced in the conf:
"Note: disabling this limit or setting it too high may result in severe damage to the system."
where the default is 25M.

Not sure about other platforms, but there has never been an MacOS infection found in large files.

> Is scanning on a mounted drive/network share feasible, and what are the effects on performance? 

Done that often, but too many variables to predict performance effects. You'll just have to try it with your setup to answer that one.

> TIA :)
> 
> Richard Tappenden

-Al-
-- 
Al Varnell
Mountain View, CA




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3860 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180425/7183418e/attachment.bin>