calmdscan datastore vs db (0day virus problem)

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
laczoster
Posts: 3
Joined: Sun Jun 02, 2019 6:37 am

calmdscan datastore vs db (0day virus problem)

Postby laczoster » Sun Jun 02, 2019 6:50 am

hi

my zimbra: 8.8.5_GA_1894_FOSS

my question is about delete 0day virus in usermailbox:
Is it safe to scan /opt/zimbra/store/ witch options remove?

Code: Select all

/opt/zimbra/common/bin/clamdscan  --remove  --config-file=/opt/zimbra/conf/clamd.conf /opt/zimbra/store/

if this does not cause problems with db / ldap ?

i using pop3/impas and pop3/smtp (migrate old system...)
L.


Klug
Elite member
Elite member
Posts: 2365
Joined: Mon Dec 16, 2013 11:35 am
Contact:

Re: calmdscan datastore vs db (0day virus problem)

Postby Klug » Sun Jun 02, 2019 9:42 am

If you do that, you'll delete the BLOB (the file on the server) while the rest of the system (database containing the list of messages per user) will not be aware of it.
For the system (IMAP, POP, webmail), the message will still exist but as the file won't be here any more you'll get "missing BLOB" error each time the user tries to access it.

So to answer your question, it causes a database problem.

You should try something else: find the message using clamAV (not "delete" it, just find it) then delete the item properly using it's item ID and ZCS' CLI tools.
https://wiki.zimbra.com/wiki/Deleting_m ... ng_the_CLI

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 14 guests