Re: I want to use ClamAV on one computer to scan mail received by Postfix on another computer
Andrew C Aitchison via clamav-users <[email protected]> Mon, 22 Sep 2025 10:13:33 +0100 (BST)
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
On Sun, 21 Sep 2025, Paul Kosinski via clamav-users wrote:
> So, what I am doing is setting up ClamAV on a small (but powerful)
> computer and running clamd on it so as to receive the mail contents
> to be scanned via a TCP port. (This might not be practical for a
> commercial email service, but the email volume associated with home
> use is pretty small.)
>
> The problem I run into is that, although clamd.conf allows one to
> specify a port number and even an an IP address for clamd to bind
> to, there seems to be no way -- such as a command-line option -- to
> specify what IP address clamdscan should talk to. (This makes the
> clamd binding address almost irrelevant, I think.)
That is a surprise.
Over the years people have suggested running a dedicated clamav server
for all the machines in a network, bu like you I now cannot find any
documentation on how to tell clam to talk to a remote server.
This is probably a red-herring, but IIRC there used to be a third option
in addition to fdpass and streaming.
The Exim docs describe how to configure Exim to talk directly to a
(pool of) remote clamd server(s). Does Postfix have a similar option ?
> The only thing I can think of, other than modifying clamdscan's
> internals (a possibly risky business), is to replace the regular
> clamd on the Postfix computer by a trivial mechanism that simply
> listens on localhost:3310 (for example) and forwards the TCP (via
> netcat or xinetd) to the ClamAV computer running the real clamd
> which listens on 10.23.45.67:3310 (for example).
>
> Might there be a better way to do this? (I briefly thought of
> setting up a VM or a "container" on the current server running
> Postfix et al, and running the latest ClamAV therein, but that would
> still require a quite disruptive upgrade of the software
> environment.)
--
Andrew C. Aitchison Kendal, UK
[email protected]
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat