If you want to scan all mailboxes the following command is what I use to
do a manual scan. This example is for qmail with vpopmail.

clamscan -r /home/vpopmail/domains --mbox -i --remove

If you want to scan an individual domain use

clamscan -r /home/vpopmail/domains/sampledomain.com --mbox -i --remove

Or if you want to scan an individual account use

clamscan -r /home/vpopmail/domains/sampledomain.com/username --mbox -i
--remove

You must use clamscan because it will not timeout which the clamdscan
will.

-Lloyd


> Okay, I like the --mbox support of clamscan.  Problem is - now that I 
> know there are infected messages in people's inboxes/other folders, I 
> have very little information to go on to find and clean those 
> messages.   For example, I know a few people have copies of  Bagle, 
> SomeFool/Netsky and so forth - but in an inbox of 4,000 items - how do I 
> know _which_ message is infected?
> 
> This also goes back to the naming problem being discussed - I try to go 
> do research on 'Exploit.HTML.Bagle.Gen-3-eml' - and come up empty.  So I 
> don't know what subjects or attcached files to look for.  I second the 
> notion of putting up a Wiki with a searchable alias database.......
> 
> The argument 'who cares what we call it if it's blocked' doesn't hold 
> water with me - SMTP is not the only way these damn things get on the 
> server - they come in via imap too when a new employee drag-n-drops half 
> a gig of outlook PST files to the server.....Apart from needing more 
> details on these damn things, I would also like a way to periodically 
> clean MBOX files in a more automated fashion, if clam can't do it does 
> anyone know of commercial products that do?
> 
> -bob
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users

-- 
Lloyd Albin <[EMAIL PROTECTED]>




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to