[clamav-users] Amavis + ClamAV can't connect to socket

[Wayne Spivak]

You are a genius, thank you Damian.

Does Freshclam run its self and if so, which service should be running Clam-Freshclam or Clamav-Freshclam?

-----Original Message-----
From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of Damian via clamav-users
Sent: Monday, April 24, 2023 6:40 AM
To: clamav-users at lists.clamav.net
Cc: Damian <clamav-users at arcsin.de>
Subject: Re: [clamav-users] Amavis + ClamAV can't connect to socket

> @av_scanners_backup = (
>
>   ### http://www.clamav.net/ - backs up clamd or Mail::ClamAV
>
>   ['ClamAV-clamscan', 'clamscan',
>
>     "--stdout --no-summary -r --tempdir=$TEMPBASE {}",
>
>     [0], qr/:.*\sFOUND$/m, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m 
> ],
>
> # ### http://www.clamav.net/ - using remote clamd scanner as a backup
>
> # ['ClamAV-clamdscan', 'clamdscan',
>
> #   "--stdout --no-summary --config-file=/etc/clamd-client.conf {}",
>
> #   [0], qr/:.*\sFOUND$/m, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m 
> ],
>
> Do I remove the quote marks (“) out of the first group?
>
No, the backup scanner is fine. The Fedora-shipped primary scanner config begins with

> @av_scanners = (
>
> # ClamAV (clamdscan)
> #
> # http://www.clamav.net/
> #
> # This is recommended way to use clamav:
> #
> # * The use of clamd eliminates the startup time associated with 
> loading #   the databases into clamscan (without the 'd').
> #
> # * The use of clamdscan eliminates the need for you to know the path 
> to #   the clamd communication socket or its low-level protocol details.
> #
> # * The --fdpass option opens the files to be scanned as the amavis 
> user, #   but then scans them as the clamav user. This avoids the 
> permission #   problems that result when you ask clamd to scan the files itself.
> #
> # * By dropping the --fdpass option, this command is easily adapted 
> for #   use with a network socket (clamd running elsewhere).
> #
>   ['ClamAV-clamdscan', 'clamdscan',
>    "--config-file=/etc/clamd.d/amavisd.conf --fdpass --stdout 
> --no-summary {}",
>    [0], qr/:.*\sFOUND$/m, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m 
> ],
>
> # ### http://www.clamav.net/ and CPAN  (memory-hungry! clamd is 
> preferred)

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat