Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : exim/antivirus question

[P-nut]

While I really like the exim/antivirus bundle on my cPanel servers, it seems to filter out more extensions than seems necessary; most notably the .eml and .url extensions.

From your experiences, is it a good idea to leave those extensions blocked?

TIA!

[sprintserve]

Install Mailscanner/ClamAV and disable those extensions. If there's really a virus, it would be caught by the virus scanner. You would not need then to rely on extension blocking which is of course really unreliable and gives tons of false alarms.

[H-U.net]

To expand upon sprintserve's point you may find the following tutorial handy for the installation of the MailScanner/ClamAV combo on your cPanel box:

http://www.cpanelplus.com/staticpage...03073009541160



Kevin

[sprintserve]

You don't really have to do it manually.

Just download it from Cpanel : http://layer1.cpanel.net/mailscanner...all-1.5.tar.gz

untar it.

run the install script.

And you should be up and running.

[linux-tech]

you can edit /etc/antivirus.exim and remove all of the stuff you don't want in there (eml, exe, etc). When you do that, restart exim and you should be fine.

Is it a good idea to leave these blocked? To me, all antivirus stuff should be done on the end user side, though too many don't have antivirus software. As an added security measure (personally) I leave them enabled to prevent virii spreading through my server.