# Configuration for zms_clamav module # "dbdir" - where to find clamav signature database files. # default is compiled into clamav library, you don't normally # need to configure it here. #dbdir /var/lib/clamav # "scantext" - scan text/* body parts too. May be expensive. # Disabled by default. Possible values "yes", "on", "no", "off" #scantext off # "filescan" - create temporary file and use cl_scandesc() on it, # rather than scan in-memory copy directly. This way you can find # OLE viruses, viruses hidden inside Portable Executables etc. # Using this may have HUGE impact on performance, so it is not # enabled by default. Possible values "yes", "on", "no", "off" #filescan off # "options" - Valid *ONLY IF "filescan" IS "on"!* # specify scanning options for cl_scandesc(). # Option name can be prefixed with '-' to turn it off. # Options that not supported in all versions of clamav are: # 'disablerar', 'algo', 'mailurl', 'nophishing', 'nodomainlist' # 'elf', 'nodomainlist', 'domainlist', 'blockssl', 'blockcloak', # 'pdf', 'structured', 'structured-ssn-normal', 'structured-ssn-stripped', # 'partial-message', 'heuristic-precedence' options archive -blockencrypted -blockmax ole2 pe -blockbroken html algo # libclamav "limits" values. maxfiles 20 maxfilesize 4M maxreclevel 20 # not in newer versions: maxratio 100 archivememlim 4M # other values for more recent versions of clamav: #min-cc-count 1 #min-ssn_count 1 #ac-only yes #ac-mindepth 0 #ac-maxdepth 20 #tmpdir /var/clamav/tmp #keeptmp no # Detect "unwanted applications": * | + cat ... | - cat ... # E.g.: Spy Scanner RAT NetTool PWTool Tool Server Script Packed IRC #detectpua * # Use "Official only" signatures in the database #official-only no # Enble bytecode (LLVM/interpreter based "signatures") #bytecode yes # end