Page 1 of 1

ftp + clamav

Posted: Sun Apr 10, 2011 10:59 am
by nobody
Guys if I install a vsftpd on a server will I be able to have clamav scan ?
In terms of security would you go for vsftpd in a non plesk enviroment ?

Regards

Re: ftp + clamav

Posted: Mon Apr 11, 2011 8:51 am
by scott
If you use dazuko, then yes its going to work on everything.

Re: ftp + clamav

Posted: Mon Apr 11, 2011 9:07 am
by nobody
scott wrote:If you use dazuko, then yes its going to work on everything.
Ah. So you simply install this dazuko-kmod-common.x86_64 and then it scans everything ? Emails - web files - ftp transfers etc ?
Won't this make the system very slow ? I mean if it reads everything during runtime ...

Regards

Re: ftp + clamav

Posted: Mon Apr 11, 2011 12:16 pm
by scott
You probably dont want that running against the mail queue, I can see that causing problems. The normal configuration is for you to say what directories to watch in real-time (like /var/www/vhosts for example).

Re: ftp + clamav

Posted: Mon Apr 11, 2011 1:10 pm
by nobody
scott wrote:You probably dont want that running against the mail queue, I can see that causing problems. The normal configuration is for you to say what directories to watch in real-time (like /var/www/vhosts for example).
So you install qscanner for emails in order they can be scanned using clamav right ?
And then modsecurity also checks whateven is uploaded via php by default correct ?
And you set dazuko to scan real time the vhosts. But as I know in proftpd there is a special config file which provides such a scan so you don't need to run dazuko and have high load on the server. So isn't there a way to do the same thing with the ftp but instead of running proftpd tu use vsftpd ? Is there some kind of incompatibility with those 2 ?

Thanks for your replies.

Regards

Re: ftp + clamav

Posted: Mon Apr 11, 2011 3:06 pm
by scott
Dont assume that dazuko == high load. Performance calculations are almost never that easy :P I honestly don't know about vsftp, since I've never used it. Its a good research thread though, so if you discover any interesting solutions for this definitely post them here (even the dead ends!).