Page 1 of 1
Disable ClamAV?
Posted: 09 May 2024 10:47
by 1an3
Hi
I think there might be an iffy clamav sig out - all of my incoming mail is getting "Virus (Denial of Service attack in message! )"
is there any way to (temporarily) disable the clamav scanning? (not ideal but in the circumstances I'll rely on further AV checking downstream)
Ian
Re: Disable ClamAV?
Posted: 09 May 2024 11:04
by shawniverson
A better option would be to change this setting in /etc/MailScanner/MailScanner.conf:
Code: Select all
Still Deliver Unscannable Messages = yes
and restart mailscanner.
Re: Disable ClamAV?
Posted: 09 May 2024 11:08
by 1an3
thanks, appreciate the v fast response.
Re: Disable ClamAV?
Posted: 09 May 2024 11:11
by 1an3
clamd was using all of the CPU so maybe there was some kind of DOS going on. I've updated now and its churning through the queue.
Re: Disable ClamAV?
Posted: 09 May 2024 11:40
by 1an3
Something weird is going on here - I'm now seeing messages which I know are OK saying
Other Infection: Y
Report: Mailscanner: message attempted to kill MailScanner
Re: Disable ClamAV?
Posted: 09 May 2024 16:49
by shawniverson
That is strange, that means those messages are also causing MailScanner to crash...
Try switching virus scanning off and see if it continues.
Restart MailScanner
Re: Disable ClamAV?
Posted: 05 Jun 2024 16:06
by doggy101
First I have a similar situation, when I boot up the server it's totally unresponsive after some time, when I set viruscanner to none mail keeps stacking up in milter inbound,
What do I have to change to not use virus scanning but keeping the mails go through the flow
Re: Disable ClamAV?
Posted: 06 Jun 2024 09:21
by 1an3
shawniverson wrote: 09 May 2024 11:04
A better option would be to change this setting in /etc/MailScanner/MailScanner.conf:
Code: Select all
Still Deliver Unscannable Messages = yes
and restart mailscanner.
maybe this option too?
Re: Disable ClamAV?
Posted: 06 Jun 2024 16:15
by doggy101
thanks. Mailflow is restored, still testing EFA5 on almalinux 9.4