DEBUG 

Enables or disables debug output from the ClamAV interface module. (Debug output from clamd itself is controlled by options on the clamd command line.) The larger the value, the more debugging output will be produced. 0 produces no output. 1 provides basic debugging. 2 adds logging of TCP traffic from clamd.

0 

FIELD 

Specifies the ClamAV result string prefix. ClamAV result strings generally look something like one of the following:  

Virus-Test: False 
Virus-Test: True ; Worm.Mydoom.I

The FIELD option provides the means for changing the Virus-Test part of the result. Note that the ": " will also be removed if an empty FIELD value is specified.

“Virus-Test” 

MESSAGE_BUFFER_SIZE 

Due to the nature of the clamdscan/clamd interface the ClamAV plugin has to buffer the message in memory before sending to ClamAV. The size of the memory buffer is controlled by this option. It defaults to 1,048,576 characters. Messages longer than this will be truncated and not sent in their entirety to ClamAV. In order to ensure that every message is scanned fully, this value should reflect the maximum message size the MTA will accept. Reducing this value may help to speed up virus scanning times, but may let through viruses undetected.

1048576 

MODE

Controls the translation of ClamAV results to verdict information. Four different modes are available: 

0 - Return the verdict string specified by the VERDICT option if the message is found to contain a virus; return a default verdict if it does not. A null verdict is returned if the VERDICT option is empty or unspecified.

1 - Return the ClamAV result as a verdict if the message is found to contain a virus; return a default verdict if not.  

2 - Return a ClamAV result string as the verdict unconditionally; no default or null verdict is ever returned and the VERDICT option is never used.

3 - Return the ClamAV result as a verdict if the message is found to contain a virus; return the verdict string specified by the VERDICT option if it is not.

0 

PORT

Specifies the port clamd is running on.

3310 

SOCKS_HOST

Specifies the name of an intermediate SOCKS server. If this option is specified the clamd connection is made through the specified SOCKS server and not directly.

3310 

SOCKS_PORT

Specifies the port the intermediate SOCKS server is running on. 

1080 

VERDICT

Specifies the verdict string used in modes 0 and 3.  

""