How to install the Antivirus Panel

 

Contributed by:

Panel is heavily based on excellent work by Damien Curtain on Pagefault.org

Created/Updated: 09-04-2006 (revision history)
Versions supported: 6.0.x and 6.5beta2

 


The SME Server Antivirus installation based on Clam Antivirus enables automatic email virus scanning of all incoming/outgoing emails and ensures that the virus definition database is automatically kept up to date. The Panel provides an option for daily statistics as well as automatic deletion of old email stored and Quarantined (usually virus infected) and Problems. 

 

If you have installed by use of an older version of this script you can now run it again for upgrade (also if you are currently using the version from pagefault.org). Be aware that older versions of ClamAV (0.65) had DoS vulnerabilities and that the ClamAV database has changed dramatically from version 0.80 with new mirror functionality so an upgrade might be a very good idea.

 

 

[root@e-smith]# wget -N http://sme.swerts-knudsen.dk/downloads/AntiVirus/antivirus_install.sh

[root@e-smith]# sh antivirus_install.sh

 

You can now try to send a test "virus" email by attaching one of the signatures you can find at eicar.org. This enables you to see whether the system detects this signature file and whether your admin account (postmaster@yourdomain.com) receives the virus notification email.

 

See FAQ below if you have any questions before mailing me.

 

 

Frequently Asked Questions (FAQ):

 

Question Answer
What do I do if I get the error message when I initially activate the panel from the server-manager
 

Can't call method "props" on an undefined value at /etc/e-smith/web/panels/manager/cgi-bin/spamfilter line 206.
For help, please send mail to the webmaster (admin), giving this error message and the time and date of the error.

Problem is that the auto generated configuration file has invalid content (a bug). Do the following from shell:

 

#cd /home/e-smith/

#mv spamassassin_V3 spamassassin_V3.old

#wget -N http://sme.swerts-knudsen.dk/downloads/SpamFilter/spamassassin_V3

 

What if I am currently using the panel from pagefault.org - can I run this install script? Yes. This script will detect the pagefault.org version and do an upgrade.
I get error message to my admin account with following content:

/usr/bin/antivirus-stats.pl
Can't locate Date/Manip.pm in @INC (@INC contains:
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/site_perl/5.6.0/i386-linux /usr/lib/perl5/site_perl/5.6.0
/usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl .) at
/usr/bin/antivirus-stats.pl line 22.
BEGIN failed--compilation aborted at /usr/bin/antivirus-stats.pl line 22.

Early installation script did not install needed Perl module. Install:

# rpm -Uvh http://sme.swerts-knudsen.dk/downloads/AntiVirus/perl-DateManip-5.40-15.i386.rpm

I get error message to my admin account with following subject "/usr/bin/freshclam --quiet -
l /var/log/clamav/freshclam.log
"

and this message:

ERROR: CVD file not found on remote server
ERROR: Can't read main.cvd header from database.clamav.net (64.18.103.6)

Usually this happens if your system is trying to update virus database while a new is being uploaded on the database server by the Clam team. The error message should not happen the next time the antivirus panel updates.
Where are the Quarantined and Problems emails located?

Quarantined emails will be quarantined in /var/spool/amavis-ng/quarantine and Problems emails in 
/var/spool/amavis-ng/problems

My server is behind a firewall or in DMZ and the Clam databases is not being updated. Configure the Proxy setting in the Antivirus Panel

 

 

Revision History

 

Date Changes
9 April, 2006 Updated to Clam 0.88.1
9 Jan, 2006 Updated to sme-antivirus 1.4.6 to correct (once again) the auto updater system and also updated Clam to version 0.88
5 Nov, 2005 Updated to sme-antivirus 1.4.5 which uses a new update location for the automatic update system to reduce download stress on contribs.org.
5 July, 2005 Updated to sme-antivirus 1.4.3 which should be more resistant to network congestion when receiving updates.
25 June, 2005 Updated to Clam 0.86.1
14 May, 2005 Updated sme-antivirus to 1.4.1 adding french language support and bug fixes:

 

- enhanced the auto download function to test for faulty downloads

- updated panel to state default to the right entry in the engine update option.

4 May, 2005 Updated sme-antivirus to 1.4.0 with support for automatic Clam Antivirus Engine and sme-antivirus updates.
17 Mar, 2005 Updated sme-antivirus to 1.3.2 and added German support thanks to Dietmar Berteld and more statistics thanks to Brian Read.
14 Feb, 2005 Updated install script to clam 0.83
5 Feb, 2005 Corrected timezone problem observed in the statistics (thanks to Laurent Dinclaux) and updated to clamav 0.82
2 Feb, 2005 Added support for SME 6.5Beta and enhanced the daily statistics report to include last database update. Updated to Clamav 0.81.
29 Oct, 2004 Made yet another update the the Clamav 0.80 package and have hopefully found all occurrences of the change from clamav.conf to clamd.conf now :-(
26 Oct, 2004 Updated to ClamAV 0.80
14 Sept, 2004 Updated install script to include installation of perl-DateManip which is needed for the daily statistics information emails
9 Sept, 2004 Updated sme-antivirus to version 1.0.1-1 with the following changes:

- The quarantined and problems lists were cut off on the screen in the server-manager panel

- The daily statistics didn't count correctly in certain cases