Question

Configure ClamAV in WHM/cPanel for scan malware in emails

Hi,

I have server with ClodLinux + WHM/cPanel. I have some questions for configure correctly ClamAV and scan the email malware:

1- I installed ClamAV since WHM plugins, I need do anything for Exim scans malware in emails with clamd?. Or this is automatic?.

2- ClamAV is update automatically when update WHM/cPanel?, or I need do anything for update ClamAV?.

Thank you very much. Have a nice day.


Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

Hello, @computereleon

You can check this previously asked question in the cPanel forum:

https://forums.cpanel.net/threads/clamav-email-question.615999/

After installing ClamAV for cPanel, you will probably need to take some further steps for full functionality.

Go to WHM >> Service Configuration >> Exim Configuration Manager > Basic Editor > Security … and enable (switch ON) the following:

Scan messages for malware from authenticated senders (exiscan). If you have the ClamAVconnector plugin installed, messages from authenticated senders are not scanned until you enable this option. It is recommended that you scan mail for authenticated senders when possible to reduce the risk of viruses spreading inside your network.​

Scan outgoing messages for malware If you have the ClamAVconnector plugin installed, enabling this option will reject mail bound for non-local domains that test positive for malware.

Hope that this helps! Regards, Alex