A couple of questions about ClamAV

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
I have a couple of questions about ClamAV for cPanel.


We manage a bunch of customer domains. If ClamAV is installed, does this integrate into all domains that we host? So that the virus scanner feature is available under Advanced for each domain?

From what I understand, ClamAV will scan all incoming emails as a default. I'm assuming it would do this for all domains that we host ?

Can you disable the virus scanner for a specific domain? Not sure there would be a reason to do this.

I'm assuming there isn't a user interface for ClamAV for example in Webmail? I'm assuming this is totally hands off for users/customers, runs in the background...?

From what it sounds like there are domain level scanning options for manually scanning different directories, such as a web sites home directory?

Although there are manual scanning options, ClamAV is always running in the background scanning incoming emails, right? And if a virus is found, this would show up in the virus scanner advanced feature for that specific domain where the infected email was inbound to? If a virus is found, is the end-user notified? Or how does a Domain Admin know if a virus is found?

Anyway, just trying to learn a little more about ClamAV before we consider installing it.
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Hey hey!

We manage a bunch of customer domains. If ClamAV is installed, does this integrate into all domains that we host? So that the virus scanner feature is available under Advanced for each domain?
It sure does!

From what I understand, ClamAV will scan all incoming emails as a default. I'm assuming it would do this for all domains that we host ?
Also correct.

Can you disable the virus scanner for a specific domain? Not sure there would be a reason to do this.
No, since it doesn't run at the user level.

I'm assuming there isn't a user interface for ClamAV for example in Webmail? I'm assuming this is totally hands off for users/customers, runs in the background...?
Correct on this one too.

From what it sounds like there are domain level scanning options for manually scanning different directories, such as a web sites home directory?
Details on using ClamAV as an independent virus scanner can be found here - https://support.cpanel.net/hc/en-us/articles/360052247114-How-to-start-a-ClamAV-scan

Although there are manual scanning options, ClamAV is always running in the background scanning incoming emails, right? And if a virus is found, this would show up in the virus scanner advanced feature for that specific domain where the infected email was inbound to? If a virus is found, is the end-user notified? Or how does a Domain Admin know if a virus is found?
ClamAV doesn't typically send notifications. There's some tricks to get that working here: clamav cpanel plugin notify if infection found

Issues related to real-time scanning can be found here: Virus in Email attachments

but if you want something more robust you might want to look into Mailscanner, although it is a paid product.
 
  • Like
Reactions: Amiga500