Mailtraq email server - KB08030601 Installing clamAV Anti-virus

Clam AntiVirus is an open source (GPL) scalable anti-virus system designed especially for e-mail scanning on multi-threaded mail gateways, such as Mailtraq.

It performs well: See http://virus.untangle.com/
ClamAV is widely used and respected: See users http://www.clamav.org/about/who-use-clamav/

It is free.

How to Install

You need to be running Mailtraq 2.12.0.2330 or above.
See 'How to Upgrade'.

Installing Clam requires two downloads.
The first is the actual ClamAV, the second is the threads dll that connects Clam to the server.

1.) Download one
Getting Clam
Download and install the clamAV.msi from
http://w32.clamav.net/downloads/clamAV.msi

Note: Do not change the default installation location

2.) Download two
Getting the threads dll
Download:
ftp://sourceware.org/pub/pthreads-win32/pthreads-w32-2-8-0-release.exe
and extract that to the clamAV folder (ie C:/Program Files/clamAV)

It will extract to several folders.

Locate this folder: C:\Program Files\clamAV\Pre-built.2\lib ,
and then manually copy the file - pthreadVC2.dll
'up' to the main C:\Program Files\clamAV directory.

Setting up ClamAV integration

Open the Mailtraq Console, Options | Anti Virus Integration ...

The Anti-Virus Manager will open (see image, right)

Select [x], and highlight 'CLAM' (don't worry that it says it can't connect to it yet, that is simply because you haven't told it where to find it...)

Then, with CLAM highlighted, click the [Properties] button. The 'ClamD Configuration' dialog will open.

Set ClamD to use Port 3310, (adjusting any firewall restrictions required elsewhere on your system),
Set the Path to clamd.exe to: C:\Program Files\clamAV\clamd.exe

Then, [OK] back to the Console.

The status line should now show Installed as 'Yes' and Status as 'Operational'

Ensure the checkbox against CLAM is checked to tell Mailtraq to run the emails through CLAM.

Mailtraq will now manage starting and running clamAV.

Testing
Mailtraq can run a test against the industry standard EICAR-AV-Test by using the [Test] button in the main Manager window.
Be aware other Antivirus software on the machine can prevent the test from completing.

ClamAV writes its own log files which will be found here: C:\Program Files\clamAV\log

Updates

You should update clamAV's virus signatures regularly by running C:\Program Files\clamAV\freshclam.exe
which is included in the first download above.

This should be set to run at least daily as a Windows Scheduled task

You can confirm the update is working by checking the version status and update date & time in the Mailtraq Anti-Virus Manager dialog.

Configuration Tips

ClamAV requires access to C:\Windows\Temp directory. If that directory does not exist you should create it.