ClamWin Free Antivirus :: View topic

Posted: Wed Jan 03, 2007 10:14 am

Can anyone give me the command line parameter for Clamscan to run on Mailmarshal and Webmarshal

Posted: Wed Jun 12, 2013 7:05 pm

Sorry for reviving such an old thread, and I doubt the OP will even see this, but I just got done getting this to work, so I joined the forum to document this config and hopefully help others.

We are running MailMarshal 6.5.4 on a Windows 2003 32bit Server, Other versions/OS may work the same.

Download and install ClamWin to the MailMarshal server
Open the MailMarshal Configurator Utility and in the left nav panel, expand the Policy Elements node, then select the Virus Scanners Item.
In the right panel, click the New Scanner button to open the New Virus Scanner Wizard.
Click the Next button on the Wizard intro page, then one the Select page, scroll down to the bottom of the list, select <Custom> and click Next.
Type a Name (ClamWin or whatever you choose), click the three dot button and browse to C:\Program Files\ClamWin\bin\clamscan.exe (or D:\, E:\, or wherever you installed ClamWin).
in the Parameter: box, enter the following:

Code:

--quiet -d "C:\Documents and Settings\All Users\.clamwin\db" "{CmdFileName}"

Here's the breakdown on the parameter line

--quiet = no text output from the cmdline scan
-d "C:\Documents and Settings\All Users\.clamwin\db" = set the path to the virus definitions, the quotes around the path are needed if there are spaces in the folder names. On 2008 and above servers, I think the path is C:\ProgramData\...
"{CmdFileName}" = This is a MailMarshal specific code, I'd guess it represent the path to the files MailMarshal wants scanned.

Leave everything set to their defaults for Timeout, Timeout per MB and single thread.
Set the Contains virus if return code is: to 1 (it's default is >0 or greater than zero, if there is an error from the scanner, it returns 2 which causes all emails to be seen as containing virus).
Set Does not contain virus if return code is: to 0 (zero).
Click the Test button, it should return successful.
Click the finish/next/Ok buttons to complete the wizard, then click the Commit Config Changes Button to save them.

In the Left Nav Pane, Expand the Email Policy node, then select the the Virus & Threats (Inbound) item.
In the right Panel, make sure the Block Virus rule name is active, If not, double click on it and check the enable rule checkbox.

That should do it for you. It took me a little bit to figure it out (especially setting to Contains Virus code to 1, I sent several tens of legitimate emails to the MailMarshal Abyss) and hopefully this will come in handy for the next guy.

-Todd

Posted: Wed Jun 12, 2013 8:11 pm

Thanks for all the work, Todd. I hope the ClamWin developers take note of this and at least put the information in a FAQ.

Thanks for using ClamWin, also.

Regards,