Samba + Samba-vscan
Boa tarde lista
Eu tinha até semana passada um servidor rodando FC3 com o Samba +
Samba-Vscan + Clamav. Nesta semana eu migrei o servidor para Debian Sarge e
estou enfrentando algumas dificuldades.
Eu tive que atualizar o samba para o samba do ETCH por um problema com a
integração do Windows 2003 Server com o Samba.
Bom, eu instalei os seguintes softwares com as respectivas versões:
Samba 3.0.20b-2+b1
clamav: 0.87.1-1
clamav-base: 0.87.1-1
clamav-daemon: 0.87.1-1
clamav-freshclam: 0.87.1-1
libclamav1: 0.87.1-1
samba-vscan: 0.3.6b
Fiz todo o procedimento de baixar o código fonte do samba, compilar o
samba-vscan, etc...
Porém o scaneamento dos arquivos está extremamente lento. Quando vou copiar
um arquivo do servidor para a estação, muitas vezes chega a cair a conexão.
Alguém tem alguma sugestão?
Segue os arquivos de configuração:
clamd.conf
##########
#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket
User clamav
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogFile /var/log/clamav/clamav.log
LogTime
LogFileMaxSize 0
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
#############
vscan-clamav.conf
##########
[samba-vscan]
; run-time configuration for vscan-samba using
; clamd
; all options are set to default values
; do not scan files larger than X bytes. If set to 0 (default),
; this feature is disable (i.e. all files are scanned)
max file size = 52428800
; log all file access (yes/no). If set to yes, every access will
; be logged. If set to no (default), only access to infected files
; will be logged
verbose file logging = no
; if set to yes (default), a file will be scanned while opening
scan on open = yes
; if set to yes, a file will be scanned while closing (default is yes)
scan on close = off
; if communication to clamd fails, should access to file denied?
; (default: yes)
deny access on error = yes
; if daemon files with a minor error (corruption, etc.),
; should access to file denied?
; (default: yes)
deny access on minor error = no
; send a warning message via Windows Messenger service
; when virus is found?
; (default: yes)
send warning message = yes
; what to do with an infected file
; quarantine: try to move to quantine directory
; delete: delete infected file
; nothing: do nothing (default)
infected file action = quarantine
; where to put infected files - you really want to change this!
quarantine directory = /DADOS/quarantine/
; prefix for files in quarantine
quarantine prefix = vir-
; as Windows tries to open a file multiple time in a (very) short time
; of period, samba-vscan use a last recently used file mechanism to avoid
; multiple scans of a file. This setting specified the maximum number of
; elements of the last recently used file list. (default: 100)
max lru files entries = 100
; an entry is invalidad after lru file entry lifetime (in seconds).
; (Default: 5)
lru file entry lifetime = 5
; exclude files from being scanned based on the MIME-type! Semi-colon
; seperated list (default: empty list). Use this with care!
exclude file types =
; socket name of clamd (default: /var/run/clamd). Setting will be ignored if
; libclamav is used
clamd socket name = /var/run/clamav/clamd.ctl
; limits, if vscan-clamav was build for using the clamav library (libclamav)
; instead of clamd
; maximum number of files in archive (default: 1000)
libclamav max files in archive = 1000
; maximum archived file size, in bytes (default: 10 MB)
libclamav max archived file size = 10485760
; maximum recursion level (default: 5)
libclamav max recursion level = 5
smb.conf
#####
[Backups]
path = /DADOS/volume4-BACKUPS/
comment = Pasta de backups
writeable = yes
delete readonly = yes
write list = @OPTINFO
read list = @OPTINFO
force directory mode = 0770
force group = OPTINFO
force create mode = 0770
create mode = 0770
directory mode = 0770
vfs object = vscan-clamav
vscan-clamav:config-file = /etc/samba/vscan-clamav.conf
#####
Alguém tem alguma sugestão?
Reply to: