[vpsFree.cz: community-list] ClamAV
Ján Raška
raskaj at gmail.com
Thu Feb 26 13:45:16 CET 2015
Mne ClamAV parkrat chytil virus, ktory isiel od legitimneho uzivatela ktory mal na VPS mailovy ucet, lebo user bol somar, pouzival neupdatnuty Windows bez antiviraku a maily posielal cez Outlook. Spamassasin asi malokedy dostatocne oboduje outgoing email, kedze ten user je normalne prihlaseny cez TLS, a posielat von emaily s virusom, to si clovek trosku koleduje. Skutocny spam s virusom v 99.9% pripadov zachyti spamassasin.
Co sa tyka fresclam, prve co robim je, ze defaultnych 24x za den nastavim na 1x, bohate to staci a robim to prave kvoli IO, ale ak to pomoze, nemam problem si to zmenit z daemona na daily cron
> On 26 Feb 2015, at 13:26, Matej Snoha <matej at snoha.info> wrote:
>
> Ad 3) - ten freshclam riesit ide:
>
> Zije to bud ako daemon, co 1-50x denne (default 24) kontroluje updaty, alebo sa to pusta cez cron.
> Co tak povedat ludom, kde to robi problem, aby vypli spustanie clamav-freshclam a napr. do cron.daily si dali freshclam --quiet ? Cas cron.daily je snad medzi virtualkami nahodny?
>
> Matej
>
> 2015-02-26 11:16 GMT+01:00 Pavel Snajdr <snajpa at snajpa.net <mailto:snajpa at snajpa.net>>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Ahojte,
>
> mam par dotazu na vas, co pouzivate ClamAV:
>
> 1) ta blbost je vubec k necemu dobra?
> 2) chyti to nekdy neco vubec?
> 3) da se nastavit vic random interval na freshclam? Tahle blbost se
> probira najednou vsem, co to maji nainstalovany a spolehlive to zabiji
> IO. Typicky node2.brq tim ted dost trpi.
>
> Ja jsem nasazoval uz peknejch par mail serveru, ale ClamAV nikdy, nebo
> jsem ho po par dnech vyhodil, protoze stejne k nicemu nebyl.
>
> Mate ho tam nekdo naschval, nebo je to jenom soucast nejaky instalace
> neceho hotovyho, jako ISPConfigu nebo tak?
>
> Dik za info.
>
> /snajpa
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iF4EAREIAAYFAlTu8mkACgkQgRwOVqYrsFWPGAD8ClLi8PcxKhmUNZ5LrpAytjCR
> NPgy8usKE6kBw4HqtkMA/ifY66NTdXou37bM7Ju1gf6b/2DkKQYXBi7/RZawnIZx
> =gjow
> -----END PGP SIGNATURE-----
> _______________________________________________
> Community-list mailing list
> Community-list at lists.vpsfree.cz <mailto:Community-list at lists.vpsfree.cz>
> http://lists.vpsfree.cz/listinfo/community-list <http://lists.vpsfree.cz/listinfo/community-list>
>
> _______________________________________________
> Community-list mailing list
> Community-list at lists.vpsfree.cz
> http://lists.vpsfree.cz/listinfo/community-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vpsfree.cz/pipermail/community-list/attachments/20150226/31948ee1/attachment-0002.html>
More information about the Community-list
mailing list