Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 550
  • Last Modified:

Clam AV om Debian

Hi;

Setting up ClamAV on a debian server. I wonder how to configure which action it takes when finding a virus infected file. I can't see anything in clamd.conf relating to this.

As we are running a hosting server I do not want it to erase any files without having checked it first.

Thanks for any suggestions
0
thosvd
Asked:
thosvd
1 Solution
 
robocatCommented:
ClamAV is not an on-access scanner comparable to a Virus scanner on a Windows system.

It provides a daemon process that can be integrated with other software, e.g. an e-mail server. ClamAV  will only indicate if the data contains a virus, it's up to the other software to decide what to do. In the case of the e-mail server, it could decide to drop the e-mail or strip the infected attachment.

You can do a file system scan with the "clamscan" CLI command. This has several options to decide what do to with the infected files:
--remove[=yes/no]
--move=DIRECTORY

The file system scan is a run once thing, which is probably not what you need. I suspect you want to permanently scan all new files ?
0
 
thosvdAuthor Commented:
Thank you for reply. Now I feel confident in setting up a recrurring scan.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now