Disable ClamAV?

[1an3]

Hi
I think there might be an iffy clamav sig out - all of my incoming mail is getting "Virus (Denial of Service attack in message! )"

is there any way to (temporarily) disable the clamav scanning? (not ideal but in the circumstances I'll rely on further AV checking downstream)

Ian

[shawniverson]

A better option would be to change this setting in /etc/MailScanner/MailScanner.conf:

Code: Select all

Still Deliver Unscannable Messages = yes

and restart mailscanner.

[1an3]

thanks, appreciate the v fast response.

[1an3]

clamd was using all of the CPU so maybe there was some kind of DOS going on. I've updated now and its churning through the queue.

[1an3]

Something weird is going on here - I'm now seeing messages which I know are OK saying
Other Infection: Y

Report: Mailscanner: message attempted to kill MailScanner

[shawniverson]

That is strange, that means those messages are also causing MailScanner to crash...

Try switching virus scanning off and see if it continues.

Code: Select all

Virus Scanners = none

Restart MailScanner

[doggy101]

First I have a similar situation, when I boot up the server it's totally unresponsive after some time, when I set viruscanner to none mail keeps stacking up in milter inbound,

What do I have to change to not use virus scanning but keeping the mails go through the flow

[1an3]

A better option would be to change this setting in /etc/MailScanner/MailScanner.conf:

Code: Select all

Still Deliver Unscannable Messages = yes

and restart mailscanner.

maybe this option too?

[doggy101]

thanks. Mailflow is restored, still testing EFA5 on almalinux 9.4