Hi, If my english is not realy good, it's because I'm french ! :)
I'm using apache-2.0.54 with mod_clamav (ClamAV 0.88.5). This mod use clamd... Is it possible to use "VirusEvent" to drop IP like : VirusEvent /sbin/iptables -I INPUT -s %c -j DROP Where %c could be the client (IP)... like in /var/log/httpd/error_log: /var/log/httpd/error_log <== [Mon Nov 13 14:20:08 2006] [error] [client 222.215.152.52] [32002] virus daemon connection problem found in request http://www.yahoo.com/ Thank's _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
