Re: I want to use ClamAV on one computer to scan mail received by Postfix on another computer

Andrew C Aitchison via clamav-users <[email protected]> Mon, 22 Sep 2025 16:32:49 +0100 (BST)
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
>> On 2025-09-21 23:09, Paul Kosinski via clamav-users wrote:
>> > The problem I run into is that, although clamd.conf allows one to specify 
>> a port number and even an an IP address for clamd to bind to, there seems 
>> to be no way -- such as a command-line option -- to specify what IP address 
>> clamdscan should talk to. (This makes the clamd binding address almost 
>> irrelevant, I think.)

On Mon, 22 Sep 2025, Paul Netpresto via clamav-users wrote:

> This should work
>
> clamdscan -c /path/to/clamdscan.conf  /email.file
>
> clamdscan.conf  contents
>
> TCPSocket 3310
>
> TCPAddr  remote clamd IP address

Thanks Paul, and Kris Deugau who made the same suggestion.

In that case, the docs need updating.

'man clamd.conf' says
    TCPAddr STRING
       By default clamd binds to INADDR_ANY.
       This  option  allows  you to restrict the TCP address and provide
       some degree of protection from the outside world. This option can
       be specified multiple times in order to listen on  multiple  IPs.
       IPv6 is now supported.
       Default: disabled

- no mention that clamdscan uses this value here or anywhere else
that I can find.

I suggest:

    TCPAddr STRING
       By default clamd binds to INADDR_ANY.
       This  option  allows  you to restrict the TCP address and provide
       some degree of protection from the outside world. This option can
       be specified multiple times in order to listen on  multiple  IPs.
       clamdscan uses this as the TCP address of a remote clamd service.
       IPv6 is now supported.
       Default: disabled

The entry "TCPSocket" in the same file should also be updated.

I suggest that `man clamdscan' should also have a section describing the
config file options that it uses: LocalSocket, TCPSocket, TCPAddr,
   MaxDirectoryRecursion, StreamMaxLength,
   FollowDirectorySymlinks and FollowFileSymlinks

-- 
Andrew C. Aitchison                      Kendal, UK
                    [email protected]
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat