How to troubleshoot Clamav?

Started by Mitheor, April 16, 2020, 10:00:11 AM

Previous topic - Next topic
April 16, 2020, 10:00:11 AM Last Edit: April 16, 2020, 10:16:05 AM by Mitheor
Hi,

i´ve just added ClamAV in my Opnsense (20.1.4) but it´s not working (i´m downloading infected files to my computer without the AV doing nothing).

Is there any way to troubleshoot this process?

Clamd, freshclam, cicap and proxy are up and running.

Everything is basically with default config.

Any idea?

Thanks in advance   :)


Edit. Nevermind, solved.



  • ensure that clamAV downloaded the signatures etc. --> Log from clamAV
  • ensure that desired traffic (HTTP / HTTPS) is routed to the proxy (transparent way= using NAT rule / explicit way = config the proxy in browsers/OS) --> access log from the proxy
  • ensure that file is handled by clamAV --> Log from C-ICAP