HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

Increase protection Clamav
http://havp.hege.li/forum/viewtopic.php?f=3&t=308		 Page 1 of 1
Author:  mevla [ 29 Oct 2007 18:35 ]
Post subject:  Increase protection Clamav
Hello

I use Havp 0.86 + ClamAV 0.91.2

I want to Increase my AV protection on Nested archives are scanned recursively.

Like write in « HAVP supports following scanners: »
Library is used directly, so there is no need for clamd running

SO i can modified file clamd.conf ?
# Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
# file, all files within it will also be scanned. This options specifies how
# deeply the process should be continued.
# Value of 0 disables the limit.
# Default: 8
#ArchiveMaxRecursion 10


OR i can modified file manager.c ?
if(opt_check(opt, "max-recursion"))
limits.maxreclevel = atoi(opt_arg(opt, "max-recursion"));
else
limits.maxreclevel = 8;


OR an other file ?

AND how new parameter take effect ?
Service havp restart OR recompile havp or clamav.


Thank you for your response.
Author:  hege [ 29 Oct 2007 23:06 ]
Post subject: 
How about checking havp.config? You will find it in ClamAV section..
Author:  mevla [ 30 Oct 2007 12:03 ]
Post subject: 
Thank you for response

Yes there is # CLAMMAXRECURSION 8 here too.


#####
##### ClamAV Library Scanner (libclamav)
#####

ENABLECLAMLIB true

# HAVP uses libclamav hardcoded pattern directory, which usually is
# /usr/local/share/clamav. You only need to set CLAMDBDIR, if you are
# using non-default DatabaseDirectory setting in clamd.conf.
#
# Default: NONE
# CLAMDBDIR /path/to/directory

# Should we block broken executables?
#
# Default:
# CLAMBLOCKBROKEN false

# Should we block encrypted archives?
#
# Default:
# CLAMBLOCKENCRYPTED false

# Should we block files that go over maximum archive limits?
#
# Default:
# CLAMBLOCKMAX false

# Scanning limits _inside_ archives (filesize = MB):
# Read clamd.conf for more info.
#
# Default:
# CLAMMAXFILES 1000
# CLAMMAXFILESIZE 10
# CLAMMAXRECURSION 8
# CLAMMAXRATIO 250


#####
##### ClamAV Socket Scanner (clamd)
#####
##### NOTE: ClamAV Library Scanner should be preferred (less overhead)
#####

ENABLECLAMD false

# Path to clamd socket
#
# Default:
# CLAMDSOCKET /tmp/clamd

# ..OR if you use clamd TCP socket, uncomment to enable use
#
# Clamd daemon needs to run on the same server as HAVP
#
# Default: NONE
# CLAMDSERVER 127.0.0.1
# CLAMDPORT 3310


I do modifie CLAMDBDIR path ?
And ?


Thank you.
Author:  mevla [ 30 Oct 2007 15:31 ]
Post subject: 
:) It's OK I change CLAMMAXRECURSION to 10 in havp.conf

and I restart havp.

Thank you very much.
Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/