[clamav-users] Specify more servers for clamdscan to pass for scanning

Micah Snyder (micasnyd) micasnyd at cisco.com
Mon Nov 5 15:19:44 UTC 2018

Hi Brent,

clamdscan and clamd share the same config file.  clamd uses it to set up the TCP socket to listen, and clamdscan uses it to know how to talk to clamd.  As a consequence, setting multiple TCPAddr's would make no sense to clamd as it will only open 1 socket to listen for connections.

I'd be interested to know if someone has come up with a hack for how to have clamdscan fail over to a secondary clamd instance - but I'm not aware of a way to do that.

I would bare in mind that if your'e using clamd on a machine remote from the clamdscan machine, the TCP connection is not encrypted at this time - meaning your file contents may be streamed in plaintext across your network.  If you need to do this, consider setting up a SSH tunnel to facilitate an encrypted connection.


On Nov 5, 2018, at 7:48 AM, Brent Clark <brentgclarklist at gmail.com<mailto:brentgclarklist at gmail.com>> wrote:

Good day Guys

I have setup two clamd servers.

On my Webservers, I need to stream a file to the clamd for scanning.

I would like to ask, how would I specify two TCPAddr.

If I specify just one, server, everything works ok.
Ive tried various options and google does not appears to be of assists.

How does one specify more than one server for scanning?

I would like to use this a poor mans "fail over", so that if one server is down, clamscan will move on to the next server.

Thanks in advance.


clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>

Help us build a comprehensive ClamAV guide:


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20181105/6c69b2d3/attachment.htm>

More information about the clamav-users mailing list