Signature Updates

Database directory - DatabaseDirectory
Path to the database directory. WARNING: It must match the directive in clamd.conf
Default: /var/lib/clamav

Pid file - PidFile
Save a process identifier of the daemon.
Default: /var/run/

Database owner - DatabaseOwner
By default when started freshclam drops privileges and switches to the "clamav" user. This directive allows you to change the database owner.
Default: clamupdate

Allow supplementary groups - AllowSupplementaryGroups
Initialize supplementary group access (freshclam must be started by root).
Default: no

DNS Database info - DNSDatabaseInfo
Use DNS to verify virus database version. Freshclam uses DNS TXT records to verify database and software versions. With this directive you can change the database verification domain.

Database mirror - DatabaseMirror
The mirror to use when downloading antivirus signatures. Replace XY with your country code. See for the full list. is a round-robin record which points to our most reliable mirrors. It is used as a fall back in case is not working.

Max attempts - MaxAttempts
How many attempts to make before giving up.
Default: 3

Scripted updates - ScriptedUpdates
With this option you can control scripted updates. It is highly recommended to keep it enabled.
Default: yes

Compress local database - CompressLocalDatabase
By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression; the change will take effect with the next database update.
Default: no

Database custom URLs - DatabaseCustomURL
Provide custom sources (http:// or file://) for database files.
Default: empty

Private mirrors - PrivateMirror
Point freshclam to private mirrors.
Default: empty

Checks - Checks
Number of database checks per day.
Default: 12

HTTP proxy server - HTTPProxyServer
Proxy server hostname.
Default: empty

HTTP proxy port - HTTPProxyPort
Proxy server port number.
Default: empty

HTTP proxy username - HTTPProxyUsername
Proxy server username.
Default: empty

HTTP proxy password - HTTPProxyPassword
Proxy server password.
Default: empty

HTTP user agent - HTTPUserAgent
Proxy server user agent.
Default: empty

Local IP address - LocalIPAddress
Use aaa.bbb.ccc.ddd as client address for downloading databases. Useful for multi-homed systems.
Default: empty

Notify clamd - NotifyClamd
Send the RELOAD command to clamd.
Default: empty

On update execute - OnUpdateExecute
Run command after successful database update.
Default: empty

On error execute - OnErrorExecute
Run command when database update process fails.
Default: empty

On outdated execute - OnOutdatedExecute
Run command when freshclam reports outdated version.
Default: empty

Foreground - Foreground
Do not fork into background.
Default: no

Debug - Debug
Enable debug messages in libclamav.
Default: no

Connect timeout - ConnectTimeout
Timeout in seconds when connecting to database server.
Default: 30

Receive timeout - ReceiveTimeout
Timeout in seconds when reading from database server.
Default: 30

Test databases - TestDatabases
With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones.
Default: yes

Submit detection stats - SubmitDetectionStats
When enabled freshclam will submit statistics to the ClamAV Project about the latest virus detections in your environment.
Default: empty

Detection stats country code - DetectionStatsCountry
Country of origin of malware/detection statistics (for statistical purposes only).
Default: empty

Detection stats host ID - DetectionStatsHostID
This option enables support for our "Personal Statistics" service.
Default: empty

Safe browsing - SafeBrowsing
This option enables support for Google Safe Browsing.
Default: no

Bytecode - Bytecode
Enable downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the antivirus engine.
Default: yes

Extra databases - ExtraDatabase
Download an additional 3rd party signature database distributed through the ClamAV mirrors.
Default: empty

Log Settings

UpdateLogFile - UpdateLogFile
Path to the log file. Make sure it has proper permissions.
Default: /var/log/freshclam.log

LogFileMaxSize - LogFileMaxSize
Maximum size of the log file. A value of 0 disabled the limit. You may use M/m for megabytes or K/k for kilobytes.
Default: 1M

LogTime - LogTime
Log the time with each message.
Default: yes

LogVerbose - LogVerbose
Enable verbose logging.
Default: no

LogSyslog - LogSyslog
Use system logger. This can work together with the log file.
Default: yes

LogFacility - LogFacility
Specify the type of syslog messages.
Default: LOG_LOCAL6

LogRotate - LogRotate
Enable log rotation. Always enabled when LogFileMaxSize is enabled.
Default: no