| View previous topic :: View next topic |
| Author |
Message |
finr
Tux's lil' helper
Joined: 24 Feb 2004
Posts: 126
|
 Posted: Sat Jul 09, 2005 12:53 pm Post subject: ClamAV & Samba: "max file size" ignored? |
 |
|
Hi all!
I'm using ClamAV with Samba as http://www.gentoo.org/doc/en/quick-samba-howto.xml?style=printable suggests, but the problem is that ClamAV scans every large file, which causes the transfer to stall and eventually timeout after the file has been transmitted. The option "max file size" should prevent this (at least I guess that's what this option is supposed to do), but it seems that ClamAV doesn't care about it, it simply scans every file regardless of its size.
My /etc/samba/vscan-clamav.conf is:
| Code: |
[samba-vscan]
max file size = 15000
verbose file logging = yes
scan on open = yes
scan on close = yes
deny access on error = yes
deny access on minor error = yes
send warning message = yes
infected file action = quarantine
quarantine directory = /srv/.quarantine
quarantine prefix = vir-
max lru files entries = 100
lru file entry lifetime = 5
clamd socket name = /var/run/clamav/clamd.sock
oav port = 8127
|
I'd be grateful if anyone has any ideas...
TIA!
Rainer. |
|
| Back to top |
|
 |
finr
Tux's lil' helper
Joined: 24 Feb 2004
Posts: 126
|
| Posted: Wed Jul 13, 2005 9:51 am Post subject: |
|
|
*bump*
 |
|
| Back to top |
|
|
magic919
Advocate
Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK
|
| Posted: Wed Jul 13, 2005 11:14 pm Post subject: |
|
|
| Given that the max file size is in units of bytes, should you not make the figure higher. About 15 Kilobytes is not such a large file. |
|
| Back to top |
|
|
finr
Tux's lil' helper
Joined: 24 Feb 2004
Posts: 126
|
| Posted: Thu Jul 14, 2005 9:38 pm Post subject: |
|
|
| magic919 wrote: | | Given that the max file size is in units of bytes, should you not make the figure higher. About 15 Kilobytes is not such a large file. |
Yes, I tried that too, I'm sorry I forgot to mention. I tried 15000 just to test the value was interpreted in KByte despite what the howto said, but it simply doesn't work at all, every file is scanned regardless of its size  . |
|
| Back to top |
|
|
magic919
Advocate
Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK
|
| Posted: Thu Jul 14, 2005 10:44 pm Post subject: |
|
|
| OK. I've not used this combo myself. Can you try switching off scan on open/close to see that ClamAV is responding to this config file. What else have you tried? |
|
| Back to top |
|
|
|
Networking & Security
