Virus Scan

[riccardino]

Hi EveryOne!
My question is:

Why the Antivirus in CPANEL System don't scan .zip or .rar e-mail???
Now, all viruses are ZIP or RAR file!!!

Regards.

Riccardo.

[AndyReed]

You need to install EXISCAN-CLAM-EXIM for anti virus email protection.

[chirpy]

...or MailScanner

[damainman]

Doesn't the cpanel virus system automatically install exiscan, when you install clamav connector?

[chirpy]

Well, strictly speaking, exiscan is a compile time option which cPanel includes in their exim distribution, so it's already there waiting to be used, if you so wish.

[Nico]

Well, strictly speaking, exiscan is a compile time option which cPanel includes in their exim distribution, so it's already there waiting to be used, if you so wish.

Is there something that needs to be done to get Exiscan to scan archives? We are getting hit hard by the Sober.P variant and it's coming in as .zip files. I can't seem to locate any informtion using the search function of the forum.

[Wallaby]

Same problem here. Anyone got a how-to for enabling zip scanning when using clamavconnector?

[Kerstin]

Cpanel (Linux) are sometimes resitent against viruses ?
EXISCAN-CLAM-EXIM a system included packege ,
must be downloaded separately and updates are available ?

Freeware MailScanner are compatible with cpanel ?

[chirpy]

I presume these are questions:

Cpanel (Linux) are sometimes resitent against viruses ?

Yes, because nearly every virus is written for Windows. There are a very few written for Linux and Mac OSX.

EXISCAN-CLAM-EXIM a system included packege ,
must be downloaded separately and updates are available ?

Exiscan is already built in exim that comes with cPanel. If you install the clamavconnector then that integrates into the exim configuration. Separate downloads are not necessary.

Freeware MailScanner are compatible with cpanel ?

Yes, it is:
http://www.configserver.com/free/mailscanner.html

[Wallaby]

Here's the situation we have: 2 servers, both with Clamavconnector installed.

On one server, the Sober virus (contained in zipfiles) is being caught. On the other server, it is not -- we have many of these getting straight through.

On the second server I've uninstalled clamavconnector and reintralled, but no change. I've checked freshclam is doing the updates, and it's up to date.

Does anyone please have any ideas -- tearing my hair out! It sounds like other folk are experiencing the same issue too.

[netwrkr]

Here's the situation we have: 2 servers, both with Clamavconnector installed.

On one server, the Sober virus (contained in zipfiles) is being caught. On the other server, it is not -- we have many of these getting straight through.

On the second server I've uninstalled clamavconnector and reintralled, but no change. I've checked freshclam is doing the updates, and it's up to date.

Does anyone please have any ideas -- tearing my hair out! It sounds like other folk are experiencing the same issue too.

I am seeing a simliar issue on my network. All servers have ClamAVconnector installed - some are catching teh Sober virus zip files others aren't. ClamAV is the same version, and all are updated with the same recent signatures.

Tom

[Kerstin]

Chirpy you mean the dictionary attack ACL for exim.

Do the Clamavconnector cleaned packages marking with binary
fingerprints ?