5 |
- |
1 |
##
|
|
|
2 |
## Example config file for freshclam
|
|
|
3 |
## Please read the freshclam.conf(5) manual before editing this file.
|
|
|
4 |
##
|
|
|
5 |
|
|
|
6 |
|
|
|
7 |
# Comment or remove the line below.
|
|
|
8 |
Example
|
|
|
9 |
|
|
|
10 |
# Path to the database directory.
|
|
|
11 |
# WARNING: It must match clamd.conf's directive!
|
|
|
12 |
# Default: hardcoded (depends on installation options)
|
|
|
13 |
#DatabaseDirectory /var/lib/clamav
|
|
|
14 |
|
|
|
15 |
# Path to the log file (make sure it has proper permissions)
|
|
|
16 |
# Default: disabled
|
|
|
17 |
#UpdateLogFile /var/log/freshclam.log
|
|
|
18 |
|
|
|
19 |
# Maximum size of the log file.
|
|
|
20 |
# Value of 0 disables the limit.
|
|
|
21 |
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
|
|
|
22 |
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes).
|
|
|
23 |
# in bytes just don't use modifiers. If LogFileMaxSize is enabled,
|
|
|
24 |
# log rotation (the LogRotate option) will always be enabled.
|
|
|
25 |
# Default: 1M
|
|
|
26 |
#LogFileMaxSize 2M
|
|
|
27 |
|
|
|
28 |
# Log time with each message.
|
|
|
29 |
# Default: no
|
|
|
30 |
#LogTime yes
|
|
|
31 |
|
|
|
32 |
# Enable verbose logging.
|
|
|
33 |
# Default: no
|
|
|
34 |
#LogVerbose yes
|
|
|
35 |
|
|
|
36 |
# Use system logger (can work together with UpdateLogFile).
|
|
|
37 |
# Default: no
|
|
|
38 |
#LogSyslog yes
|
|
|
39 |
|
|
|
40 |
# Specify the type of syslog messages - please refer to 'man syslog'
|
|
|
41 |
# for facility names.
|
|
|
42 |
# Default: LOG_LOCAL6
|
|
|
43 |
#LogFacility LOG_MAIL
|
|
|
44 |
|
|
|
45 |
# Enable log rotation. Always enabled when LogFileMaxSize is enabled.
|
|
|
46 |
# Default: no
|
|
|
47 |
#LogRotate yes
|
|
|
48 |
|
|
|
49 |
# This option allows you to save the process identifier of the daemon
|
|
|
50 |
# Default: disabled
|
|
|
51 |
#PidFile /var/run/freshclam.pid
|
|
|
52 |
|
|
|
53 |
# By default when started freshclam drops privileges and switches to the
|
|
|
54 |
# "clamav" user. This directive allows you to change the database owner.
|
|
|
55 |
# Default: clamav (may depend on installation options)
|
|
|
56 |
#DatabaseOwner clamav
|
|
|
57 |
|
|
|
58 |
# Initialize supplementary group access (freshclam must be started by root).
|
|
|
59 |
# Default: no
|
|
|
60 |
#AllowSupplementaryGroups yes
|
|
|
61 |
|
|
|
62 |
# Use DNS to verify virus database version. Freshclam uses DNS TXT records
|
|
|
63 |
# to verify database and software versions. With this directive you can change
|
|
|
64 |
# the database verification domain.
|
|
|
65 |
# WARNING: Do not touch it unless you're configuring freshclam to use your
|
|
|
66 |
# own database verification domain.
|
|
|
67 |
# Default: current.cvd.clamav.net
|
|
|
68 |
#DNSDatabaseInfo current.cvd.clamav.net
|
|
|
69 |
|
|
|
70 |
# Uncomment the following line and replace XY with your country
|
|
|
71 |
# code. See http://www.iana.org/cctld/cctld-whois.htm for the full list.
|
|
|
72 |
# You can use db.XY.ipv6.clamav.net for IPv6 connections.
|
|
|
73 |
#DatabaseMirror db.XY.clamav.net
|
|
|
74 |
|
|
|
75 |
# database.clamav.net is a round-robin record which points to our most
|
|
|
76 |
# reliable mirrors. It's used as a fall back in case db.XY.clamav.net is
|
|
|
77 |
# not working. DO NOT TOUCH the following line unless you know what you
|
|
|
78 |
# are doing.
|
|
|
79 |
DatabaseMirror database.clamav.net
|
|
|
80 |
|
|
|
81 |
# How many attempts to make before giving up.
|
|
|
82 |
# Default: 3 (per mirror)
|
|
|
83 |
#MaxAttempts 5
|
|
|
84 |
|
|
|
85 |
# With this option you can control scripted updates. It's highly recommended
|
|
|
86 |
# to keep it enabled.
|
|
|
87 |
# Default: yes
|
|
|
88 |
#ScriptedUpdates yes
|
|
|
89 |
|
|
|
90 |
# By default freshclam will keep the local databases (.cld) uncompressed to
|
|
|
91 |
# make their handling faster. With this option you can enable the compression;
|
|
|
92 |
# the change will take effect with the next database update.
|
|
|
93 |
# Default: no
|
|
|
94 |
#CompressLocalDatabase no
|
|
|
95 |
|
|
|
96 |
# With this option you can provide custom sources (http:// or file://) for
|
|
|
97 |
# database files. This option can be used multiple times.
|
|
|
98 |
# Default: no custom URLs
|
|
|
99 |
#DatabaseCustomURL http://myserver.com/mysigs.ndb
|
|
|
100 |
#DatabaseCustomURL file:///mnt/nfs/local.hdb
|
|
|
101 |
|
|
|
102 |
# This option allows you to easily point freshclam to private mirrors.
|
|
|
103 |
# If PrivateMirror is set, freshclam does not attempt to use DNS
|
|
|
104 |
# to determine whether its databases are out-of-date, instead it will
|
|
|
105 |
# use the If-Modified-Since request or directly check the headers of the
|
|
|
106 |
# remote database files. For each database, freshclam first attempts
|
|
|
107 |
# to download the CLD file. If that fails, it tries to download the
|
|
|
108 |
# CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo
|
|
|
109 |
# and ScriptedUpdates. It can be used multiple times to provide
|
|
|
110 |
# fall-back mirrors.
|
|
|
111 |
# Default: disabled
|
|
|
112 |
#PrivateMirror mirror1.mynetwork.com
|
|
|
113 |
#PrivateMirror mirror2.mynetwork.com
|
|
|
114 |
|
|
|
115 |
# Number of database checks per day.
|
|
|
116 |
# Default: 12 (every two hours)
|
|
|
117 |
#Checks 24
|
|
|
118 |
|
|
|
119 |
# Proxy settings
|
|
|
120 |
# Default: disabled
|
|
|
121 |
#HTTPProxyServer myproxy.com
|
|
|
122 |
#HTTPProxyPort 1234
|
|
|
123 |
#HTTPProxyUsername myusername
|
|
|
124 |
#HTTPProxyPassword mypass
|
|
|
125 |
|
|
|
126 |
# If your servers are behind a firewall/proxy which applies User-Agent
|
|
|
127 |
# filtering you can use this option to force the use of a different
|
|
|
128 |
# User-Agent header.
|
|
|
129 |
# Default: clamav/version_number
|
|
|
130 |
#HTTPUserAgent SomeUserAgentIdString
|
|
|
131 |
|
|
|
132 |
# Use aaa.bbb.ccc.ddd as client address for downloading databases. Useful for
|
|
|
133 |
# multi-homed systems.
|
|
|
134 |
# Default: Use OS'es default outgoing IP address.
|
|
|
135 |
#LocalIPAddress aaa.bbb.ccc.ddd
|
|
|
136 |
|
|
|
137 |
# Send the RELOAD command to clamd.
|
|
|
138 |
# Default: no
|
|
|
139 |
#NotifyClamd /path/to/clamd.conf
|
|
|
140 |
|
|
|
141 |
# Run command after successful database update.
|
|
|
142 |
# Default: disabled
|
|
|
143 |
#OnUpdateExecute command
|
|
|
144 |
|
|
|
145 |
# Run command when database update process fails.
|
|
|
146 |
# Default: disabled
|
|
|
147 |
#OnErrorExecute command
|
|
|
148 |
|
|
|
149 |
# Run command when freshclam reports outdated version.
|
|
|
150 |
# In the command string %v will be replaced by the new version number.
|
|
|
151 |
# Default: disabled
|
|
|
152 |
#OnOutdatedExecute command
|
|
|
153 |
|
|
|
154 |
# Don't fork into background.
|
|
|
155 |
# Default: no
|
|
|
156 |
#Foreground yes
|
|
|
157 |
|
|
|
158 |
# Enable debug messages in libclamav.
|
|
|
159 |
# Default: no
|
|
|
160 |
#Debug yes
|
|
|
161 |
|
|
|
162 |
# Timeout in seconds when connecting to database server.
|
|
|
163 |
# Default: 30
|
|
|
164 |
#ConnectTimeout 60
|
|
|
165 |
|
|
|
166 |
# Timeout in seconds when reading from database server.
|
|
|
167 |
# Default: 30
|
|
|
168 |
#ReceiveTimeout 60
|
|
|
169 |
|
|
|
170 |
# With this option enabled, freshclam will attempt to load new
|
|
|
171 |
# databases into memory to make sure they are properly handled
|
|
|
172 |
# by libclamav before replacing the old ones.
|
|
|
173 |
# Default: yes
|
|
|
174 |
#TestDatabases yes
|
|
|
175 |
|
|
|
176 |
# When enabled freshclam will submit statistics to the ClamAV Project about
|
|
|
177 |
# the latest virus detections in your environment. The ClamAV maintainers
|
|
|
178 |
# will then use this data to determine what types of malware are the most
|
|
|
179 |
# detected in the field and in what geographic area they are.
|
|
|
180 |
# Freshclam will connect to clamd in order to get recent statistics.
|
|
|
181 |
# Default: no
|
|
|
182 |
#SubmitDetectionStats /path/to/clamd.conf
|
|
|
183 |
|
|
|
184 |
# Country of origin of malware/detection statistics (for statistical
|
|
|
185 |
# purposes only). The statistics collector at ClamAV.net will look up
|
|
|
186 |
# your IP address to determine the geographical origin of the malware
|
|
|
187 |
# reported by your installation. If this installation is mainly used to
|
|
|
188 |
# scan data which comes from a different location, please enable this
|
|
|
189 |
# option and enter a two-letter code (see http://www.iana.org/domains/root/db/)
|
|
|
190 |
# of the country of origin.
|
|
|
191 |
# Default: disabled
|
|
|
192 |
#DetectionStatsCountry country-code
|
|
|
193 |
|
|
|
194 |
# This option enables support for our "Personal Statistics" service.
|
|
|
195 |
# When this option is enabled, the information on malware detected by
|
|
|
196 |
# your clamd installation is made available to you through our website.
|
|
|
197 |
# To get your HostID, log on http://www.stats.clamav.net and add a new
|
|
|
198 |
# host to your host list. Once you have the HostID, uncomment this option
|
|
|
199 |
# and paste the HostID here. As soon as your freshclam starts submitting
|
|
|
200 |
# information to our stats collecting service, you will be able to view
|
|
|
201 |
# the statistics of this clamd installation by logging into
|
|
|
202 |
# http://www.stats.clamav.net with the same credentials you used to
|
|
|
203 |
# generate the HostID. For more information refer to:
|
|
|
204 |
# http://www.clamav.net/support/faq/faq-cctts/
|
|
|
205 |
# This feature requires SubmitDetectionStats to be enabled.
|
|
|
206 |
# Default: disabled
|
|
|
207 |
#DetectionStatsHostID unique-id
|
|
|
208 |
|
|
|
209 |
# This option enables support for Google Safe Browsing. When activated for
|
|
|
210 |
# the first time, freshclam will download a new database file (safebrowsing.cvd)
|
|
|
211 |
# which will be automatically loaded by clamd and clamscan during the next
|
|
|
212 |
# reload, provided that the heuristic phishing detection is turned on. This
|
|
|
213 |
# database includes information about websites that may be phishing sites or
|
|
|
214 |
# possible sources of malware. When using this option, it's mandatory to run
|
|
|
215 |
# freshclam at least every 30 minutes.
|
|
|
216 |
# Freshclam uses the ClamAV's mirror infrastructure to distribute the
|
|
|
217 |
# database and its updates but all the contents are provided under Google's
|
|
|
218 |
# terms of use. See http://www.google.com/transparencyreport/safebrowsing
|
|
|
219 |
# and https://github.com/vrtadmin/clamav-faq/blob/master/faq/faq-safebrowsing.md
|
|
|
220 |
# for more information.
|
|
|
221 |
# Default: disabled
|
|
|
222 |
#SafeBrowsing yes
|
|
|
223 |
|
|
|
224 |
# This option enables downloading of bytecode.cvd, which includes additional
|
|
|
225 |
# detection mechanisms and improvements to the ClamAV engine.
|
|
|
226 |
# Default: enabled
|
|
|
227 |
#Bytecode yes
|
|
|
228 |
|
|
|
229 |
# Download an additional 3rd party signature database distributed through
|
|
|
230 |
# the ClamAV mirrors. Here you can find a list of available databases:
|
|
|
231 |
# http://www.clamav.net/download/cvd/3rdparty
|
|
|
232 |
# This option can be used multiple times.
|
|
|
233 |
#ExtraDatabase dbname1
|
|
|
234 |
#ExtraDatabase dbname2
|