Clam AV: move instead of delete?
Question asked by Michael Kowalski - November 30, 2016 at 1:53 PM
Is there any way to have ClamAV move marked incoming email to a quarantine folder instead of deleting them automatically? Or moving them to the junk folder? I would like to check for false/positives since we get a lot of attachments. Currently checking the log, ClamAV automatically deletes the e-mails, so besides looking at some minimal information, it is very difficult to check.            

3 Replies

Reply to Thread
Hi Michael. ClamAV has the option to quarantine viruses up to 30 days. Go into your Antivius administration and enable Clam's Real-Time AV. Set the quarantine to 15 or 30 days. Click the Real-Time AV tab and enter the path to a quarantine directory of your choice then click Save.
Linda Pagillo
Mail's Best Friend
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
Rod Lasky Replied
Employee Post Marked As Answer
Hi Michael.  Go to Security >> Antivirus Administration >> Options tab.  Change the "Virus Quarantine" setting from None to 15/30 days.  
Afterwards, any messages flagged by ClamAV will not be deleted, but placed into a Virus Quarantine folder located at Manage >> Spool >> Virus Quarantine.  I hope this helps.
Rod Lasky
Technical Support Specialist
SmarterTools Inc.
(877) 357-6278
Thanks guys, I will go ahead and do this. I saw this option, but for some reason was under the impression after reading that it was only for outbound messages.
Easy to check! : )

Reply to Thread