Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

[Adam Sweet via clamav-users]

On 22/08/2023 20:09, Mona AlRekabi via clamav-users wrote:


Kindly, find the attached file.


This log file looks fine. Clamd is starting and binding to 
127.0.0.1:3310. I'm still not clear what the client application is, but 
you say it's running on the same host as ClamAV so it should work.


"No connection could be made because the target machine actively refused 
it 127.0.0.1:3310" is a fairly generic network connectivity error, but 
the "actively refused" part means something decided to refuse the 
connection rather than nothing answered.


There is information here on testing clamd connectivity over a TCP socket:

https://mivilisnet.wordpress.com/2022/12/24/testing-the-clamav-installation/

If it works then it can connect and the issue is perhaps a problem with 
the client program.


If the connection fails, since an issue has already been identified with 
Freshclam reaching the Internet to collect AV signature updates, I'd be 
inclined to believe that you have a firewall refusing connections to 
3310, even from the host itself.


As far as I understand, Clamd does not have any IP blocking or ACLs to 
determine what can/can't connect, so it is presumably a firewall 
refusing the connection since the Clamd logs say it is starting and 
binding fine but no connections are logged.


Check your firewall logs.

Regards,

Adam Sweet
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] Help clamdscan faster

[Nhat Tran Xuan via clamav-users]

 Hello,
We are running a file management project with file storage using amazon S3.

Our core architecture is every time there is an event to upload or edit a
file on s3, it will trigger an event to run an ECS task, that ECS will be a
container containing clamAV to scan for viruses of that file.
The whole process of the task is :  download the file from s3 -> scan the
file for viruses ->  push scan result to a webhook to display the message

1.How do you think about this architecture?

2.We are seeing that scanning takes a long time with large excel files (
~20min for 2-3GB file), is there any way to make it faster?

3. We are using "clamdscan" , is there any limit on how many files ( in
folder ) can be scanned at once or maximum file size ?

3.If we run the ECS Fargate task with 2vCPU - 8GB RAM, will we be able to
scan the maximum file size? 20GB file size can be scannable?

Best regards,
Harry Tran
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] Help clamdscan faster

[newcomer01 via clamav-users]

Hello,

yes as a result of architecture there is the limit of 2gb for each single file, 
if the file is larger then the limit you will get an false-positive scan result 
for this file.
-> please feel free to read what you find interesting: 
https://docs.clamav.net/Introduction.html

kind greetings
newcomer01


Von / From: Clamav User Mailinglist 
An / To: Newcomer01 
CC / CC: Nhat Tran Xuan 
Gesendet / Sent: Mittwoch, August 23, 2023 um 20:25 (at 08:25 PM) +0200
Betreff / Subject: [clamav-users] Help clamdscan faster

Hello,
We are running a file management project with file storage using amazon S3.

Our core architecture isevery time there is an event to upload or edit a file 
on s3, it will trigger an event to run an ECS task, that ECS will be a 
container containing clamAV to scan for viruses of that file.
The whole process of the task is :  download the file from s3 -> scan the file for 
viruses ->  push scan result to a webhook to display the message

1.How do you think about this architecture?

2.We are seeing that scanning takes a long time with large excel files ( ~20min 
for 2-3GB file), is there any way to make it faster?

3. We are using "clamdscan" , is there any limit on how many files ( in folder 
) can be scanned at once or maximum file size ?

3.If we run the ECS Fargate task with 2vCPU - 8GB RAM, will we be able to scan 
the maximum file size? 20GB file size can be scannable?

Best regards,
Harry Tran

___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat