Download

amavisd-new is a rewritten version of amavis maintained by Mark Martinec. clamscan is enabled automatically if clamscan binary is found at amavisd-new startup time. clamd is activated by uncommenting its entry in the @av_scanners list, file /etc/amavisd.conf. You can generate some nifty stats from amavisd log files using”:[amavis-stats [amavis-stats

Get amavisd-new

clamav-milter is a very fast email scanner designed for Sendmail. It’s written entirely in C and only depends on libclamav or clamd.

Get clamav-milter

smtp-vilter is a high performance content filter for sendmail using the milter API. The software scans e-mail messages for viruses and drops or marks infected messages. The backend to use for the actual filtering is configurable, we currently have support for ClamAV and the Symantec Anti Virus Scan Engine (savse). The backends are realised as shared libraries that are loaded dynamically when smtp-vilter starts.

Get smtp-vilter

MIMEDefang is an efficient mail scanner for Sendmail/milter.

Get MIMEDefang

smf-clamd is a lightweight filter for Sen.

Get smf-clamd

Qmail-Scanner is an add-on that enables a Qmail email server to scan all gateway-ed email for certain characteristics (i.e. a content scanner). It is typically used for its anti-virus protection functions, in which case it is used in conjunction with external virus scanners. but also enables a site (at a server/site level) to react to email that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments).

Get qmail-scanner

Simscan is a simple program enables qmail-smtpd to reject viruses, spam and block attachments during the SMTP conversation so the email never makes it into your computers. It is completely open source and uses other open source compoments (see below). Very efficent and written in C.

Get simscan

Qscanq replaces qmail-queue. It initiates a scan (using clamscan or clamdscan) on an incoming email, and returns the exit status of the scanner or of qmail-queue to the caller.

Get Qscanq

Qsheff is a new spam and antivirus wrapper. It can be used as a drop in replacement for qscanq. It’s more flexible and has got a few more features.

Get Qsheff

Clamdmail is a qmail-queue replacement that allows mail to be filtered, greylisted, or rejected before queuing based on connection information and message content by providing an interface for programs like clamd-greylist, clamdscan and SpamAssassin.

Get Clamdmail

ClamSMTP is an SMTP filter for Postfix and other mail servers that checks for viruses using the ClamAV anti-virus software. It aims to be lightweight, reliable, and simple rather than have a myriad of options. Written in C without major dependencies.

Get ClamSMTP

Clapf is a clamav based virus scanning and anti-spam content filter for Postfix.

Get clapf

Starting with release 4.50, Exim natively supports ClamAV.

Get exim

Mail Avenger is a highly-configurable SMTP server. It allows you to reject spam during mail transactions, before spooling messages in your local mail queue. You can specify site-wide default policies for filtering mail, but individual users can also craft their own policies by creating avenger scripts in their home directories.

Get Mail Avenger

MailScanner scans all e-mail for viruses, spam and attacks against security vulnerabilities. It is not tied to any particular virus scanner, but can be used with any combination of 14 different virus scanners, allowing sites to choose the best of breed virus scanner.

Get Mail Scanner

Maverix is AOLserver module that implements SMTP protocol and acts as a SMTP proxy with anti-spam and anti-virus capabilities.

Get Maverix

Sagator is an email antivirus/antispam gateway. Its modular architecture can use any combination of antivirus/spamchecker according to configuration.

Get Sagator

Smtp-gated is a transparent SMTP proxy supporting: NAT on Linux (netfilter), NAT on FreeBSD (ipfw and others getsockopt-compatible), or dedicated mode (separate/external machine). DATA traffic is spooled in write-thru mode and then scanned for viruses or spam. The program is transparent for TLS connections.

Get SMTP-gated

Zmscanner is an extensible modular content filter for Zmailer and Sendmail. It is designed to be fast and efficient and thus suitable for high traffic mail systems.

Get Zmscanner

Courier MTA includes four filers.

courier-pythonfilter by Gordon Messner. Included in a Python filter suite, it uses pyClamAV (libclamav with python)

Courier::Filter::Module::ClamAVd by Julian Mehnle. A Perl module for use with Courier::Filter, using clamavd.

ClamCour by Tony Di Monaco. A C++ (with Boost) multithreaded filter using libclamav

avfilter by Alessandro Vesely. A C forking filter using libclamav.

Get Courier-MTA

Haraka is a robust MTA written in node.js, with a modular architecture that lets plugins control nearly every aspect of the SMTP conversation. There is a large selection of included plugins, including a clamav plugin (docs, source) that filters messages using clamd.

Haraka is attractive to two audiences:

1. Anyone managing mail systems with thousands or tens-of-thousands of concurrent incoming SMTP connections (like Craigslist) and wants to do with it fewer racks of servers.
2. Developers who need more control over mail routing, filtering, and processing than can be easily or efficiently handled with traditional (milter-based) MTAs.

Get Haraka

HAVP is a proxy with an antivirus filter. It does not cache or filter content. At the moment the complete traffic is scanned. A reason for that is the chance of malicious code in nearly every filetypes e.g. HTML (JavaScript) or Jpeg.

Get HAVP

mod_clamav is an Apache virus scanning filter. It was written and is currently maintained by Andreas Müller. The project is very well documented and the installation is quite easy.

Get mod_clamav

mod_streamav is designed as an Apache 2 filter, which scans the content of Apache Brigades, using the Clamav virus scanning engine. Different from mod_clamav, mod_streamav is a scanning engine based on streaming mode.

Get mod_streamav

A PHP-based script based upon ClamAV signatures designed to detect trojans, viruses, malware and other threats within files uploaded to your system wherever the script is hooked. Written by Maikuolan

Get phpMussel

ClamFS is a FUSE-based user-space file system for Linux with on-access anti-virus file scanning through clamd daemon. The LRU cache is used to provide fast access to files already scanned when multiple open requests are preformed. ClamFS support three logging methods (stdout, file, and syslog) and sends e-mail notification when virus is found.

Get ClamFS

Avfs, a true on-access anti-virus file system that incrementally scans files and prevents infected data from being committed to disk. Avfs is a stackable file system and therefore can add virus detection to any other file system: Ext3, NFS, etc. Avfs supports forensic modes that can prevent a virus from reaching the disk or automatically create versions of potentially infected files to allow safe recovery. Avfs can also quarantine infected files on disk and isolate them from user processes.

Get Avfs

This project provides a kernel module, which provides 3d-party applications an interface for file access control. It was originally developed by H+BEDV Datentechnik GmbH to be used for on-access virus scanning. Other uses include a file-access monitor/logger or external security implementations. It operates by intercepting file-access calls and passing the file information to a 3rd-party application. The 3rd-party application then has the opportunity to tell the kernel module to allow or deny the file-access. The 3rd-party application also receives information about the file, type of access, process id, and user id.

Get Dazuko

samba-vscan provides on-access scanning of Samba shares with ClamAV, FRISK F-Prot Daemon, Kaspersky AntiVirus, OpenAntiVirus.org ScannerDaemon, mks AntiVirus, Sophos Sweep (via Sophie), Symantec AntiVirus Engine (via ICAP), and Trend Micro (via Trophie). It supports Samba 2.2.x/3.0 with working virtual file system (VFS) support.

Get samba-vscan

Mail is a fully-featured email client that fits nicely into the K Desktop Environment, KDE. It supports attachment scanning with clamscan.

Get Kmail

Open WebMail by default can use ClamAV as the external viruscheck module to scan messages fetched from pop3 servers or all incoming messages. If a message or its attachments is found to have virus, Open WebMail will move the message from INBOX to the VIRUS folder automatically.

Get Open Webmail

ClamAssassin is a simple script for virus scanning an e-mail message as a filter. If a message is virus infected, the X-Virus-Status header is set to Yes and the X-Virus-Report header is set to the virus(es) found. If the message is fine, it is passed through with X-Virus-Status set to No. This is intended to act much like spamassassin does. This makes it easy to plug it into a procmail or other filter quite easily. If you’ve already set up a system to use spamassassin, you can easily use similiar procedures to implement clamassassin.

Get ClamAssassin

Softlabs AntiVirus is a generic anti-virus filter for incoming mail servers on Unix, running as plugin for procmail. In addition, it plugs to the ClamAV if available.

Get SoftlabsAV

QClam is a simple program to plug ClamAV antivirus to your Qmail mailbox. It runs from your ~/.qmail file. It receives incoming messages from Qmail and scans them using clamscan. If a virus found, it returns 99 to Qmail telling it that the message should not be processed (and it just gets removed). If no virus found, or there was an error calling clamscan, QClam returns 0 to QMail and it delivers message as usually. QClam also writes results of scanning into log file. It’s written in C++ and doesn’t require any other software to run. Its size is just about 7k.

Get QClam

QMVC is an unidirectional mail filter for Qmail. It works in conjunction with the dot-qmail mechanism for qmail-local and is entirely designed for Qmail (no additional patches required).

Get QMVC

Mono binding for ClamAV

Get ClamAV#

Clamson provides a simple C# API to the ClamAV daemon (clamd) via TCP.

Get Clamson

A Perl client class for clamd

Get ClamAV::Client

A tiny libclamav binding for .NET (C# and VB.NET).

Get SharpClam

A ClamAV plug in fpr SpamAssassin 3.X

Get ClamAVPlugin

Ruby binding for ClamAV

Get ClamAV gem

Scan files and control clamd directly from Perl

Get File::Scan::ClamAV

Perl extension for the ClamAV virus scanner.

Get Mail::ClamAV

PHP ClamAV Lib is a PHP extension that allows incorporation of virus canning features in PHP scripts.

Get PHP ClamAV Lib

Python binding for ClamAV

Get PYClamAV

Add virus detection capabilities to your python software in an efficient and easy way.

Get pyClamd

A clamd monitor compatible with the mon software.

Get clamd.monitor

This is a modified version of clamdscan. It can stream a file to an intstance of clamd running on another host, via TCP socket.

Get clamd-stream-cl

IPCop Linux is a complete Linux Distribution whose sole purpose is to protect the networks it is installed on. ClamAV is included.

Get IPCop

INSERT (the Inside Security Rescue Toolkit) aims to be a multi-functional, multi-purpose disaster recovery and network analysis system. It boots from a credit card-sized CD-ROM and is basically a stripped-down version of Knoppix. It features good hardware detection, fluxbox, emelfm, links-hacked, ssh, tcpdump, nmap, chntpwd, and much more. It provides full read-write support for NTFS partitions (using captive), and the ClamAV virus scanner (including the signature database).

Get INSERT

Endian Firewall is a turn-key linux security distribution based on IPCop that turns every system into a full featured security appliance. The software has been designed with usability in mind and is very easy to install, use and mange, without loosing its flexibility. The features include a stateful packet inspection firewall, application level proxies for variuos protocols (HTTP, POP3, SMTP) with antivirus support, virus and spamfiltering for email traffic (POP and SMTP), content filtering of Web traffic and a hassle free VPN solution based on OpenVPN.

Get Endian Firewall

qmailmrtg7 utilizes qmail and tcpserver/multilog’s extensive logging capabilities to create mrtg graphs. It efficiently processes the log files and can graph viruses found by ClamAV.

Get qmailmrtg7

RedWall is a bootable CD-ROM firewall which focuses on web-based reporting of the firewall’s status. It supports virus filtering with amavisd-new and ClamAV.

Get Redwall Firewall

Scan analyzer allows you to plot and view graphical representation of log data from virus logs of RAV, ClamAV and Vexira.

Get Scan Log Analyzer

ClamTk is a GUI front-end for ClamAV using gtk2-perl. It is designed to be an easy-to-use, on-demand scanner for Linux systems. ClamTk has been ported to Fedora, Debian, RedHat, openSUSE, ALT Linux, Ubuntu, CentOS, Gentoo, Archlinux, Mandriva, PCLinuxOS, FreeBSD, and others.

Get ClamTK