Hi All, @davidep @stephdl
In NS7, ClamAV was available, but only with sheduled scans, no official support for “On Access” scanning was available.
The first open source product I’ve seen with “On Access” ClamAV available for a file storage:
Any chance this may be on the radar for the future?
→ All Windows based file servers offer this…
A once a week or daily scan doesn’t really cut it - malware can be distributed in the meantime so just wastes CPU cycles…
No real reason why not, this demonstrates the code is available!
OpenMediaVault is based on Debian, so it should work on NS8 too.
My 2 cents
Andy
6 Likes
davidep
(Davide Principi)
June 25, 2024, 1:48pm
2
I’ve no experience with server-side AV scan. Is it effective? I’m afraid the ClamAV stock signatures are not, and at least a paid signature DB is necessary.
1 Like
mrmarkuz
(Markus Neuberger)
June 25, 2024, 9:39pm
3
Here’s an example scanner config for samba on NS7, it should also work on NS8:
Thanks @bunkobugsy for the link, this really seems a nice feature.
I tested with the rspamd clamav instance so it logs in /var/log/maillog but it just works.
Opening the eicar test file on my backup share now produces following log entry and I can’t open the file.
Feb 10 23:46:20 server2 clamd[23335]: /var/lib/nethserver/ibay/backup/eicar.com: Eicar-Test-Signature.UNOFFICIAL FOUND
How to test it using custom templates
Create custom template dir:
mkdir -p /etc/e-smith/templates-custom/etc/s…
1 Like