|Jenkins 3b55d5469d Release 0.5.3||pirms 2 gadiem|
|amavisvt||pirms 2 gadiem|
|tests||pirms 2 gadiem|
|.gitignore||pirms 3 gadiem|
|.travis.yml||pirms 3 gadiem|
|LICENSE.txt||pirms 3 gadiem|
|Makefile||pirms 2 gadiem|
|README.md||pirms 2 gadiem|
|amavisvt_example.cfg||pirms 3 gadiem|
|requirements.txt||pirms 2 gadiem|
|requirements_dev.txt||pirms 3 gadiem|
|setup.py||pirms 3 gadiem|
|sonar-project.properties||pirms 2 gadiem|
amavisvt is a daemon to include Virustotal as an amavisd-new virus scanner by using the Virustotal Public API.
amavisvt uses memcached to reduce the number of calls to the API. While it’s possible to run amavisvt without memached, it’s strongly advised to do so.
Even with memcached in place, you might hit Virustotals API limit pretty fast and
amavisvt will stop detecting an new threats.
If you hit Virustotal’s API limit regularly, you might want to change the API endpoint url to an alternative one (see below), which acts as a proxy and has a much higher limit.
amavisvt uses the SHA256 hash of mimeparts to fetch file scan reports from Virustotal.
amavisvt does not send any content to virustotal unless you have the filename pattern detection feature enabled (see
amavisvt_example.cfg for details).
To reduce the number of requests to VT even further,
amavisvt only asks for reports for parts whose mime type (identified by libmagic) starts with
image/ or are typical scripts (perl, python, shell).
amavisvt may integrate configurable filter for the mime types and/or file extensions.
If you are on Gentoo Linux, add the last hope overlay and emerge amavisvt:
layman -a last-hope emerge app-antivirus/amavisvt -av
amavisvt ships with an example config file. Place it in one of the following locations:
./amavisvt.cfg and adjust it to your needs.
127.0.0.1:11211 and must accept connections from localhost.
@av_scanners_backup. Starting with 0.4 AmavisVT uses a daemon:
api_url to https://hub.ercpe.de/vtcache/vtapi/v2/file/report which acts as a caching proxy for the Virustotal API and gives you a higher API limit.