JclamAV 在线环境安装

环境说明:

系统为 CentOS Stream 9(本说明书适用于 Cent7-Cent9全系列,Cent7和Cent8需要换yum源为国内镜像)

1.安装Jclam依赖包

yum install -y clamav

文件下载完成之后配置文件会默认保存至 /usr/local/etc/目录下,后续修改配置文件将在此文件夹下进行

2.添加用户和用户组

groupadd clamav
useradd -g clamav clamav

3.创建日志目录、病毒库目录和套接字目录

#创建目录
mkdir -p /usr/local/clamav/logs
#创建病毒库目录(后续离线更新病毒库需要更改这个目录下面的三个文件 daily.cvd,bytecode.cvd,main.cvd)
mkdir -p /usr/local/clamav/update
#创建套接字目录
mkdir -p /usr/local/clamav/socket

4.手动创建日志文件

#创建服务运行日志
touch /usr/local/clamav/logs/clamd.log
#创建病毒库更新日志
touch /usr/local/clamav/logs/freshclam.log

5.文件授权,将病毒库目录,日志目录,套接字目录赋权给clamav用户及其用户组

 chown clamav:clamav /usr/local/clamav/logs/clamd.log
 chown clamav:clamav /usr/local/clamav/logs/freshclam.log
 chown clamav:clamav /usr/local/clamav/logs
 chown clamav:clamav /usr/local/clamav/update
 chown clamav:clamav /usr/local/clamav/socket

6.修改配置文件

cp  /usr/local/etc/clamd.conf.sample /usr/local/etc/clamd.conf
cp /usr/local/etc/freshclam.conf.sample /usr/local/etc/freshclam.conf
# 服务日志地址
LogFile /usr/local/clamav/logs/clamd.log
# pid服务信息文件地址
PidFile /usr/local/clamav/update/clamd.pid
# 病毒库地址
DatabaseDirectory /usr/local/clamav/update
# 套接字文件地址
LocalSocket /usr/local/clamav/socket/clamd.socket
 
# TCP port address.
# Default: no
# 服务对外端口默认3310
TCPSocket 3310
 
# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world. This option can be specified multiple
# times if you want to listen on multiple IPs. IPv6 is now supported.
# Default: no
# 此处ip地址修改成当前部署机器的ip地址
# 绑定对外服务ip
TCPAddr 192.168.0.1
 
# Maximum length the queue of pending connections may grow to.
# Default: 200
# 连接队列数量,支持同时连接客户端数
MaxConnectionQueueLength 30
 
# Close the connection when the data size limit is exceeded.
# The value should match your MTA's limit for a maximum attachment size.
# Default: 100M
# 流最大长度(你可以理解为单次扫描的文件大小为多大)
StreamMaxLength 3000M
 
# Limit port range.
# Default: 1024
StreamMinPort 1024
# Default: 2048
StreamMaxPort 32000