[GLUG-tech] Re: Fedora 7 AND samba AND (samba-vscan OR dazuko or crontab)

[Buchan Milne <bgmilne@xxxxxxxxxxxx>]

On Thursday 20 September 2007 13:31:17 Frans Coomans wrote:
> Hi.  I recently read an article about integrating real-time samba
> virus-scanning, us samba-vscan and clamav.  The distro in the article
> was suse.

Mandriva also ships samba-vscan for clamav and icap.

> I am however using Fedora 7 and did a search for the samba-vscan rpm for
> Fedora, but found nothing.

Fedora does not ship samba-vscan.

> Next I looked on the vscan website and found 
> that the latest development was in 2005.

No, a new beta version (supporting 3.0.25c and later) was released a few days 
ago:

http://www.openantivirus.org/download/

> I then read that you can use the kernel module dazuko which uses clamav
> to scan files in real-time.  I was once again unable to find
> anything(binaries) for Fedora 7.

Dazuko is a kernel module, AFAIK the source is now in the upstream kernel, but 
it is most likely just not enabled in the default kernel.

However, note that dazuko would probably be doing a lot more scanning than you 
need.

> I have a few questions:
> 1.  Is the samba-vscan project still alive?

Kind of.

> 2.  If so is there any reason why Fedora is not shipping anymore.  They
> did in FC2...

Are you sure? I've never seen them ship it. Mandriva has been shipping it for 
more than 3 years.

> Is this due to a bug/security issue?
> 3.  Does anybody know of a dazuko mod for Fedora 7?

Seems it's not shipped in the kernel srpm.

> 4.  What are the performance implications of scanning in real-time?
>
> I know that I can simply create a crontab entry to get clamav to scan
> certain dirs at certain intervals.  Is this the better option?  What do
> you guys use for "real-time" scanning for samba, if any?


I have used it successfully in the past, but whether it is practical or not 
would depend on the IO load you need to support.

Regards,
Buchan
-- 
To unsubscribe: send the line "unsubscribe glug-tech" in the
subject of a mail to "glug-tech-request@xxxxxxxxxxxx".
Problems? Email "glug-tech-admins@xxxxxxxxxxxx". Archives are at
http://www.linux.org.za/Lists-Archives/