On Wed, 15 Jun 2005, Jim Popovitch wrote:
On Wed, 2005-06-15 at 14:22 -0700, Dennis Peterson wrote:
clamd is useful for testing for viruses on the file system in addition to
any email viruses. clamav-milter handles only email. They are not
exclusive tools.
;-) OK, I understand their purposes, but maybe I (or maybe others)
don't understand how they work. Are you saying that clamav-milter is a
wholly contained AV process that does NOT require clamd? Why then is
there a common local socket or network interface setup between the two?
clamav-milter IS wholly-contained, though it DOES depend on libclamav
(but not clamd). And you'd also want freshclam, of course. I suspect
rpm packagers just don't want to bother with having separate packages
for libclamav, clamd, freshclam, and clamav-milter. Though I think
that's the path RedHat started down with this.
As for your confusion: clamav-milter USED TO require clamd to function.
That requirement was removed in version 0.83.[1] clamav-milter works, by
default, without clamd (but can use clamd if you specify --external).
For simple setups, I typically recommend people use clamav-milter
WITHOUT clamd, as there is one fewer daemon running that could fail.
But if you frequently scan local files (and hence need clamdscan) or
your sendmail box is extremely busy (and hence you want to offload
scanning to separate boxes (can be plural)) then the --external method
is the way to go.
There's a bug in clamav-milter 0.84 through 0.85.1 (fixed in milter
0.85e, which is part of 0.86rc1) that causes occasional milter hangs
during the database reload. One workaround is to use clamd (since then
the milter isn't handling the database reload). Another workaround is
to use clmilter_watch to recover from hangs (you should be doing this
anyway). Finally, you could downgrade (to 0.83) or upgrade (to
0.86rc1).
[1] I might be a little off on exactly when the dependency was removed.
There was a brief time when you could specify --internal to remove the
dependency, but it still used clamd by default. I think that was
version 0.82. But that was a short-lived version, so I don't have notes
for it.
Damian Menscher [was a historian in a previous existence]
--
-=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
