ftp + clamav

General Discussion of atomic repo and development projects.

Ask for help here with anything else not covered by other forums.
nobody
Forum Regular
Forum Regular
Posts: 349
Joined: Sun Mar 29, 2009 6:52 pm

ftp + clamav

Unread post by nobody »

Guys if I install a vsftpd on a server will I be able to have clamav scan ?
In terms of security would you go for vsftpd in a non plesk enviroment ?

Regards
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: ftp + clamav

Unread post by scott »

If you use dazuko, then yes its going to work on everything.
nobody
Forum Regular
Forum Regular
Posts: 349
Joined: Sun Mar 29, 2009 6:52 pm

Re: ftp + clamav

Unread post by nobody »

scott wrote:If you use dazuko, then yes its going to work on everything.
Ah. So you simply install this dazuko-kmod-common.x86_64 and then it scans everything ? Emails - web files - ftp transfers etc ?
Won't this make the system very slow ? I mean if it reads everything during runtime ...

Regards
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: ftp + clamav

Unread post by scott »

You probably dont want that running against the mail queue, I can see that causing problems. The normal configuration is for you to say what directories to watch in real-time (like /var/www/vhosts for example).
nobody
Forum Regular
Forum Regular
Posts: 349
Joined: Sun Mar 29, 2009 6:52 pm

Re: ftp + clamav

Unread post by nobody »

scott wrote:You probably dont want that running against the mail queue, I can see that causing problems. The normal configuration is for you to say what directories to watch in real-time (like /var/www/vhosts for example).
So you install qscanner for emails in order they can be scanned using clamav right ?
And then modsecurity also checks whateven is uploaded via php by default correct ?
And you set dazuko to scan real time the vhosts. But as I know in proftpd there is a special config file which provides such a scan so you don't need to run dazuko and have high load on the server. So isn't there a way to do the same thing with the ftp but instead of running proftpd tu use vsftpd ? Is there some kind of incompatibility with those 2 ?

Thanks for your replies.

Regards
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: ftp + clamav

Unread post by scott »

Dont assume that dazuko == high load. Performance calculations are almost never that easy :P I honestly don't know about vsftp, since I've never used it. Its a good research thread though, so if you discover any interesting solutions for this definitely post them here (even the dead ends!).
Post Reply