View source for Installing and Configuring ICAP on ClamAV

= Procedure =

== Install Packages on RHEL 9 ==

1) Install EPEL Repository in RHEL 9

 subscription-manager repos --enable codeready-builder-for-rhel-9-$(arch)-rpms

2) run dnf

 <nowiki>dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm -y</nowiki>

3) Install Clamav packages

 dnf -y install clamav clamav-data clamav-devel clamav-freshclam clamav-filesystem clamav-lib clamd

4) Install C-ICAP packages

 dnf install c-icap c-icap-libs c-icap-modules -y

== Step 2: Update Virus definition ==

Check install with update virus definition

 freshclam


== Step 3: Configure ICAP Server ==

1) Backup default ICAP server configuration file:

 cd /etc/c-icap
 
 mv c-icap.conf c-icap.conf_original
 mv virus_scan.conf virus_scan.conf_original
 mv clamd_mod.conf clamd_mod.conf_original
 mv srv_content_filtering.conf srv_content_filtering.conf_original

2) Create a c-icap.conf and add the following content:

 <nowiki>
Include virus_scan.conf
Include srv_content_filtering.conf
PidFile /run/c-icap/c-icap.pid
CommandsSocket /run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 10
MinSpareThreads     10
MaxSpareThreads     20
ThreadsPerChild     10
MaxRequestsPerChild  0
Port 1344
ServerAdmin you@your.address
ServerName YourServerName
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
Pipelining on
SupportBuggyClients off
ModulesDir /usr/lib64/c_icap
ServicesDir /usr/lib64/c_icap
TemplateDir /usr/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
acl all src 0.0.0.0/0.0.0.0
acl PERMIT_REQUESTS type REQMOD RESPMOD OPTIONS
icap_access allow all PERMIT_REQUESTS
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Service echo srv_echo.so
</nowiki>

Save and exit the file

3) Create a virus_scan.conf and add the following content:

 <nowiki>
Service antivirus_module virus_scan.so
ServiceAlias srv_clamav virus_scan
ServiceAlias  avscan virus_scan?allow204=on&sizelimit=off&mode=simple
virus_scan.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GIF JPEG MSOFFICE
virus_scan.SendPercentData 5
virus_scan.StartSendPercentDataAfter 2M
virus_scan.MaxObjectSize  5M
virus_scan.DefaultEngine clamav
Include clamd_mod.conf
</nowiki>

3) Create a virus_scan.conf and add the following content:

 <nowiki>
Service antivirus_module virus_scan.so
ServiceAlias srv_clamav virus_scan
ServiceAlias  avscan virus_scan?allow204=on&sizelimit=off&mode=simple
virus_scan.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GIF JPEG MSOFFICE
virus_scan.SendPercentData 5
virus_scan.StartSendPercentDataAfter 2M
virus_scan.MaxObjectSize  5M
virus_scan.DefaultEngine clamav
Include clamd_mod.conf
</nowiki>

Save and exit the file

== Step 4: Start the ICAP Server ==

 systemctl start clamav-icap

== Step 5: Verify Configuration ==

1) Check the ICAP server's status

 sudo systemctl status clamav-icap

2) Ensure there are no errors in the log file

 tail -f /var/log/clamav-icap.log


== Ver também ==

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]


*[[Linux|  Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias|  Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:Clamav]]
[[Category:Postfix]]
[[Category:SMTP]]