[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] Disable official database
From:       Kees Theunissen <kees.theunissen () xs4all ! nl>
Date:       2019-08-25 3:12:50
Message-ID: alpine.LNX.2.20.1908250402430.3293 () ithmar ! remmin ! home
[Download RAW message or body]

On Sat, 24 Aug 2019, azurit@pobox.sk wrote:

> Hi,
>
> is it possible to disable official virus database? I would like to use only
> custom database. Thanks for info.

Before I retired nearly a year ago I ran for several years an instance
of clamd on the incoming mail servers at work that should only detect
macro's in office files. These macro's are detected by build-in
heuristics in clamd so I didn't need virus databases at all for these
clamd instances but I didn't want to run clamd in the ultimate edge
case using no databases. (I didn't even test if I could start clamd
without databases.)

I created a database dirctory containing only a custom database with a
single definition to detect the "eicar-virus". I created a customized
clamd config file pointing to this nearly empty database dirctory.
And I started these instances of clamd with the commandline option to
use this customized config file. The overhead involved with using
a single -actually not needed- eicar definition was acceptable to me.

So yes, at that time, it was possible to run at least clamd without
the official virus database. I only used this with clamd, not with
clamscan. And I didn't test this with the current clamav version.


Regards,

Kees.

-- 
Kees Theunissen
Email: kees.theunissen@xs4all.nl

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
[prev in list] [next in list] [prev in thread] [next in thread]