Linux ClamAV

ClamAV Linux Antivirus Scanner

ClamAV is an anti-virus scanner for Linux systems.  While it is fully capable of scanning files, it is most useful to scan incoming emails.

Like procmail, ClamAV is a standard add-on package on most Linux systems.  Therefore, installation is usually very straight forward.  The method varies depending on the version of Linux you have.

It is implemented using procmail.  See my previous blog regarding procmail.  The documentation that comes with ClamAV has a good explanation of how to configure procmail to implement ClamAV.

Procmail is configured to pass the message to ClamAV.  ClamAV then scans the email for viruses and phishing schemes.  If it determines that it contains malicious code, it adds a tag to the header.  The message passes back to procmail, whether anything was found or not.  Procmail is then configured to check for the header indicating malicious code, and act accordingly if it is found.  If it is not found, then the message is deemed to be clean, and processing continues.

I particularly like this approach, with an anti-virus scanner on the mail server.  Additionally, your anti-virus software should be scanning incoming mail on your desktop, also.  This gives two levels of protection.

You can read more at the ClamAV home page.

Contact CCS Retail Systems Technical Support for Assistnace.
 

Leave a Reply