Jerry K wrote: > I am a new ClamAV user. I am configuring a new mail server running > Solaris 9 + sendmail 8.13.x. > > I have several specific questions, but my first question is one of where > to find more documentation. To date, I have printed out the user guide, > gone through the FAQ several time, looked through the archives and done > some google'ing. > > specific questions I have are: > > a) since I am using sendmail, I am making the assumption that > compiling/using libmilter is the way to go?
Not necessarily. You can use any of the 3rd party packages available for integration with sendmail. > b) if I am using ClamAV as a milter, do I need to run the clamd daemon > or will sendmail just call libclamav.a/so? You choose wich way you want to go, with or without clamd. > c) What is the default behavior when ClamAV receives an email with a > virus? Does it just delete the whole email? Does it quarantine the file > and forward the email to the user? Or is there any action, other than > virus identification when an email arrives with an attached virus. By clamav what do you mean? The milter is configurable to do all the things you mention and more. With other (3rd party) mail scanners options vary but you usually can configure to discard the message or quarantine and show what was done in some log. Packages like MailScanner can check for viruses and for spam, which is what I think you are driving at. > I did find this line in the clamd.conf file, but I don't know what > command that I would run when a virus is found > > <i>Execute a command when virus is found. In the command string</i> Any script or program can be executed. I don't use this option but I've seen programs that keep statistics. > Also, from my google'ing, I came across this page > > http://linux-sxs.org/administration/clamav-milter.html > > that indicates that email's with viruses are rejected. Is this the only > possible action? Thats OK if it is, I have just yet to run across the > run across the documentation that discusses this. Or, I have over looked > it. No, usually most people configure the milter to quietly discard the infected message. The documentation is in clamav-milter/INSTALL and the man page. > d) is ClamAV + Sendmail everything I need, once functional? I am asking > this because several of the links that I came across while google'ing > mentioned using ClamAV in coordination with another product called Amavis. Amavis is one of the 3rd party packages that do more than virus scanning (spam, file extension, whatever). > Also, roughly half of the user manual is filled with "Third Party > Products". Why some of these have obvious purposed (graphing or log > file processing), are there any of these necessary for me to get up and > going in my environment? No. > TIA for any pointers or URL's where I can RTFM. HTH -- René Berber _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
