How to check if EFA scans for viruses

Questions and answers about how to do stuff
Post Reply
bostjanc
Posts: 165
Joined: 01 Jun 2016 17:18

How to check if EFA scans for viruses

Post by bostjanc »

Hi.
Still on EFA 3.0.2.6.
Lately a lot of doc infected attachments comes thru EFA and I started to investigate if EFA does even scan attachment for viruses.
So far I found in mailscanner config file that Virus Scanning is set to Yes and it's set to use clamd, but now I don't know how to check if this thing is actually working.

- How can I check the status of clamd on EFA 3.0.2.6?
- How can I check if clamd is up 2 date?

If I look messages headers I don't see any clamd notifications if the message had been scanned. Please help.
With best regards
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: How to check if EFA scans for viruses

Post by pdwalker »

If you're really using EFA 3.0.2.6 you really need to upgrade and get the latest version running on Centos 8. This should be your first concern.

That said, send yourself a test malware file. There is a "safe" one that should be detected by clamav if it is configured and running properly. Look here: https://www.eicar.org/?page_id=3950
bostjanc
Posts: 165
Joined: 01 Jun 2016 17:18

Re: How to check if EFA scans for viruses

Post by bostjanc »

Hi pdwalker. Thanks for the reply.
Yes we had migrated to efa 4.x.
We decided to migrate on CentOS 7 instead of 8, due to l8t news regardin RHEL & CentOS8.
With best regards
BostjanC
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: How to check if EFA scans for viruses

Post by pdwalker »

Excellent news.

Were you able to use the EICAR test to check to see if clamav is working?
bostjanc
Posts: 165
Joined: 01 Jun 2016 17:18

Re: How to check if EFA scans for viruses

Post by bostjanc »

I had trouble sending that eicar test, as I have tried sending it over GMAIL which automatically disallowed sending those kind of txt attachments :/
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: How to check if EFA scans for viruses

Post by pdwalker »

pm me an email address, and I'll send you a file.
Post Reply