AVG Linux E-mail Server User Manual

For linux e-mail server

Advertisement

Quick Links

AVG Linux Email Server / User Manual
AVG 7.1 for Linux E-mail Server
User Manual
Document revision 71.7 (15.6.2006)
Copyright (c) 1992-2006 GRISOFT, s.r.o. All rights reserved.
This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, Copyright (C) 1991-2, RSA
Data Security, Inc. Created 1991.
This product uses code from C-SaCzech library, Copyright (c) 1996-2001 Jaromir Dolecek
<dolecek@ics.muni.cz>
This product uses compression library zlib, Copyright (C) 1995-2002 Jean-loup Gailly and Mark Adler
This product uses libtar library, Copyright (c) 1998-2003 University of Illinois Board of Trustees,
Copyright (c) 1998-2003 Mark D. Roth
This product uses compression library libbzip2, Copyright (C) 1996-2002 Julian R Seward
This product uses XML parser library expat, Copyright (C) 1998, 1999 James Clark
This product uses library libcurl, Copyright (c) 1996 - 2003, Daniel Stenberg, <daniel@haxx.se>
This product includes Flex software developed by the University of California, Berkeley and its
contributors, Copyright (c) 1993 The Regents of the University of California
All other trademarks are property of their respective owners.
www.grisoft.com
Copyright (c) 1992-2006 GRISOFT, s.r.o. All rights reserved.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Linux E-mail Server and is the answer not in the manual?

Questions and answers

Summary of Contents for AVG Linux E-mail Server

  • Page 1 AVG Linux Email Server / User Manual AVG 7.1 for Linux E-mail Server User Manual Document revision 71.7 (15.6.2006) Copyright (c) 1992-2006 GRISOFT, s.r.o. All rights reserved. This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, Copyright (C) 1991-2, RSA Data Security, Inc.
  • Page 2: Table Of Contents

    5.2. Performance and Resource Usage ............19 5.3. Using Unix Socket for an Extra Security..........20 6. Commercial E-mail Servers ..............21 6.1. AVG for Lotus Notes/Domino Server Installation and Maintenance ...21 6.2. AVG for Kerio MailServer Maintenance..........29 7. Standalone Command Line Modules ............. 33 7.1.
  • Page 3: Introduction

    Server. AVG for Linux E-mail Server Kernel Features AVG for Linux E-mail Server is a product based on the AVG for Linux scanning kernel. The AVG for Linux kernel provides comprehensive and reliable protection against viruses for Linux powered machines. It offers many features, such as scheduled and on-demand scanning of folders, files, and common archive types for possible virus infection.
  • Page 4: Before Installation

    AVG Linux Email Server / User Manual 2. Before Installation 2.1. Prerequisites Before installing AVG for Linux E-mail Server you must verify that your system meets the following requirements: Libraries The following libraries are required in order to ensure the AVG for Linux kernel can be installed and run properly: libc.so.6...
  • Page 5: Installation Package

    Refer to chapter 4.2 Third Party Products/AMaViS to see how to install the AMaViS scanner, and how to integrate it with AVG for Linux E-mail Server. Qmail-Scanner If you use the qmail MTA, an alternative solution to AMaVis mail virus scanner is Qmail-Scanner –...
  • Page 6: Installation And Launch

    $ ./install.sh installation script. Note: The program files of the AVG for Linux E-mail Server versions 11 and older are installed into the /usr/local/lib/avg7 directory. Even if you perform the full update of older version of your AVG Anti-Virus, the directory structure remains the same (ensuring the backwards compatibility).
  • Page 7 AVG for Linux E-mail Server on your computer. Perform installation from the packages mentioned in the table above to also install the AVG for Linux E-mail Server command line modules (besides the e-mail scanning daemons).
  • Page 8 AVG Linux Email Server / User Manual Product Registration After the installation process you need to register your AVG for Linux E-mail Server unless it has been registered already during the installation process; this applies to special packages for AVG Anti-Virus vendor partners.
  • Page 9 AVG Linux Email Server / User Manual For proper function of the on-access scanning daemon the DAZUKO kernel module is required. Refer to section 7.3 Standalone Command Line Modules/On-access Scanner for detailed information on this topic. The included command line modules can be operated as described in chapter 7.
  • Page 10: Third Party Products

    4. Third Party Products Third party software is needed to preprocess incoming and outgoing e-mail messages content before they can be scanned by AVG for Linux E-mail Server. Two solutions are available for particular e-mail servers – the AMaViS and the Qmail-Scanner security packages.
  • Page 11: Amavis

    AMaViS tools. The essential modules responsible for extracting e-mail content and passing it to the AVG for Linux E-mail Server scanning engine are implemented in Perl. This is why the Perl language interpreter has to be installed on your system.
  • Page 12 # perl Makefile.PL # make test # make install Make sure AVG for Linux E-mail Server is installed and operational before starting the AMaViS installation. Installation To install AMaViS from the source code, unpack the selected downloaded package (the amavis package is given in the following example): $ tar -xvzf amavis-{version}.tar.gz...
  • Page 13: Qmail-Scanner

    AVG Linux Email Server / User Manual different MTA, you must re-run AMaViS configuration, because the script contains only the code for the MTA it was initially configured for. The configuration steps to be taken for particular mail transport agent consist...
  • Page 14 AVG Linux Email Server / User Manual diff -u qmail-1.03-orig/Makefile qmail-1.03/Makefile --- qmail-1.03-orig/Makefile Mon Jun 15 04:53:16 1998 +++ qmail-1.03/Makefile Tue Jan 19 10:52:24 1999 @@ -1483,12 +1483,12 @@ trigger.o fmtqfn.o quote.o now.o readsubdir.o qmail.o date822fmt.o \ datetime.a case.a ndelay.a getln.a wait.a seek.a fd.a sig.a open.a \ lock.a stralloc.a alloc.a substdio.a error.a str.a fs.a auto_qmail.o \...
  • Page 15 For extra security, create it with a normal home directory (e.g. /home/qscand), but with a "fake" shell (e.g. /bin/false), as Qmail-Scanner never logs in directly. Make sure AVG for Linux E-mail Server is installed and operational before attempting to install Qmail-Scanner. Installation Unpack the Qmail-Scanner package using the $ tar -xvzf qmail-scanner-{version}.tgz...
  • Page 16 Run the $ ./configure command (possibly with selected options). This determines all the features and recognizes the AVG for Linux E-mail Server virus scanning software on your computer. Run the # ./configure –install command as root this time (again, possibly with other options you have selected before).
  • Page 17 You must increase the limit to approximately 5-11MB (the exact range depends on your system parameters and load). If you want to enable AVG for Linux E-mail Server to scan all mail sent by local shell users, the qmailqueue must be defined in /etc/profile file.
  • Page 18: Testing The Installation

    4.4. Testing the Installation Successful installation of AVG for Linux E-mail Server and the appropriate mail content scanner (AMAViS or Qmail-Scanner) can be tested within any supported e-mail server by sending a message with the Eicar test file attachment. The attachment should be removed from the e-mail, and replaced by a virus infection notification.
  • Page 19: E-Mail Scanning

    AVG Anti-Virus scanning kernel and interface for scanning the e-mail content fetched by AMaViS, Qmail-Scanner or respective commercial e-mail server. The number of e-mail scanning daemons can be specified in the AVG for Linux E- mail Server configuration file (see chapter 8.3 Configuration File/AvgDaemon detailed information on this issue).
  • Page 20: Using Unix Socket For An Extra Security

    AVG Linux Email Server / User Manual 5.3. Using Unix Socket for an Extra Security You can take advantage of launching the AVG Anti-Virus e-mail scanning daemon within the same account as the e-mail content scanner (AMaViS or Qmail- Scanner). Moreover, the e-mail scanning daemon can create a Unix socket and listen on it then in order to increase the e-mail scanning security.
  • Page 21: Commercial E-Mail Servers

    AVG Linux Email Server / User Manual 6. Commercial E-mail Servers AVG for Linux E-mail Server can also be used with commercial e-mail servers running under Linux. The main idea of such a solution is to protect the (possibly Windows powered) computers of users connected to these e-mail servers against the possible virus infection.
  • Page 22 This will automatically launch the AVG for Lotus Notes/Domino Server Linux plugin (server services AvgScan and AvgMail) and create the AVG Anti-Virus databases (AVG Configuration, AVG Log and AVG Virus Vault). All of these can be blocked in the appropriate configuration sections later if needed.
  • Page 23 AVG for Lotus Notes AVG Virus Vault AVG for Lotus Notes Double click on the AVG for Lotus Notes field in the administrator utility domain window’s File tab (see the previous screenshot) to open the AVG for Lotus Notes – Configuration window: In this window, select the appropriate server on which you want to have the AVG Anti-Virus configuration database.
  • Page 24 AVG Virus Vault database. A field entitled Infected files allows you to specify the action to be taken for virus-infected files.
  • Page 25 Text of warning field. Scheduled Database Scan You can plan the scanning of server databases in this area of the AVG for Lotus Notes/Domino Server configuration form. Various fields are available: Scan at times –...
  • Page 26 In the Lotus Notes/Domino Server administration environment you can access the Virus Vault via the AVG Virus Vault database. It is a special server database as mentioned in the previous paragraph. Double click the corresponding field in the Lotus administrator utility domain window’s File tab...
  • Page 27 Text – the text of the log information Uninstalling the AVG for Lotus Notes Linux Plugin If you want to install newer version of AVG for Lotus Notes Linux plugin, you must uninstall the older version first. You can perform the uninstallation manually as root.
  • Page 28 AVG Linux Email Server / User Manual Delete the following files from the /usr/local/lotus/notesdata directory: avgln.pdf avglog.ntf avglog.nsf avgsetup.ntf avgsetup.nsf avgvirus.ntf avgvirus.nsf Open the /usr/local/lotus/notesdata/notes.ini in a text editor and delete the avgmail and avgscan strings from the line beginning with ServerTasks idetifier.
  • Page 29: Avg For Kerio Mailserver Maintenance

    Antivirus tab of the configuration window: You can press the Options button to open the following window: In this window you can change the values of the address and port the AVG for Linux e-mail scanning daemon is listening on.
  • Page 30 AVG Linux Email Server / User Manual Attachment Filter Tab On the Attachment Filter tab there is a list of various attachment definitions: You can enable/disable filtering of mail attachments by selecting the Enable attachment filter field. Each item in the list has four fields: Type –...
  • Page 31 AVG Linux Email Server / User Manual An item is removed from the list by pressing the Remove button. You can add another item to the list by pressing the Add… button. Or, you can edit an existing record by pressing the Edit… button. This window then appears: In the Description field you can write a short description of the attachment to be filtered.
  • Page 32 AVG Linux Email Server / User Manual There are two sections: Action This section specifies an action to be carried out when a virus is detected in a message, or when a message is filtered by an attachment filter: Forward the message to administrator address - when selected,...
  • Page 33: Standalone Command Line Modules

    AVG Linux Email Server / User Manual 7. Standalone Command Line Modules As a part of the AVG for Linux E-mail Server internal structure, several command line configurable and executable modules are included in the installation package. 7.1. AVGSCAN Command The avgscan command is intended to perform various on-demand tests.
  • Page 34 Reports changes encountered during scanning. -ignlocked Makes the scanner ignore locked files. -register [LICENSE] Registers the AVG for Linux E-mail Server; it is necessary to enter the valid license number either on the command line right after the -register option (separated by the space character), or later when prompted after the command execution without license given on the command line.
  • Page 35 – a virus found by heuristic analysis – a particular virus was found – an active virus found in memory – corruption of some of the AVG for Linux E-mail Server command line components 10 – an archive contains password protected files...
  • Page 36: Avgupdate Command

    7.2. AVGUPDATE Command Anti-virus systems can guarantee reliable protection only if they are updated regularly. AVG for Linux E-mail Server provides a reliable and fast update service with quick response times via the avgupdate command line utility. AVG Anti-Virus offers three different update levels (update levels of lower...
  • Page 37 AVG Linux Email Server / User Manual Optional update The optional update reflects changes that are not necessary for program functionality – texts, updates of the setup component, etc. Optional updates can be downloaded and applied together with recommended updates but the timeliness of implementing them is not urgent.
  • Page 38 The options for the avgupdate command are described in the following table: Parameter Description -o, --online Performs an online update from the Internet; the location where the update files are downloaded from is specified in the AVG Anti- Virus configuration file. (See section 8. Configuration File for detailed information.).
  • Page 39 AVG Linux Email Server / User Manual Parameter Description -a, --no- When this option is selected, the AVG for Linux E-mail Server daemons daemons will not be restarted following the update; for some server systems this option can help in avoiding problems with the incorrect restart of daemons.
  • Page 40: On-Access Scanner

    The DAZUKO kernel interface for file access control must be inserted as a module into your kernel in order to enable the on-access scanning using the AVG for Linux E-mail Server engine. You can download the latest version of DAZUKO at http://www.dazuko.org.
  • Page 41 Once the DAZUKO module is installed and inserted, the AVG for Linux E-mail Server daemons responsible for the on-access scanning will be fully functional. You need to make sure the daemons are running and restart them if they have been stopped (refer to the following paragraph to see how to do this).
  • Page 42: Service Signals

    – shows the status of the daemons condrestart – conditionally restarts the daemons Note: You can only control the AVG for Linux E-mail Server daemons as root this way! The on-access scanning performance can be configured using the common AVG for Linux E-mail Server configuration file.
  • Page 43: Configuration File

    If you are logged in as root, you can change the parameter values directly in the configuration file avg.conf using any plain text editor (e.g. vi, vim, pico, joe, gedit, emacs, jed, jedit, ed, …).
  • Page 44: Onaccessscanner

    .jpg .gif; the default value is none 8.3. AvgDaemon Configuration of the AVG for Linux E-mail Server e-mail scanning daemon(s): port – port number the daemon listens on; possible values are positive integers (preferably assigned to unused ports); the default value is 55555 www.grisoft.com...
  • Page 45: Avgupdate

    AVG Linux Email Server / User Manual unixSocketName – the name of the Unix socket used for the e-mail scanning daemon communication purposes; the default value is /tmp/avg.sock address – local IP address the daemon is bound to – should be the same as the local address of your e-mail server;...
  • Page 46 AVG Linux Email Server / User Manual 3 – maximum logging level, detailed information on all update phases is recorded (useful when an update fails for some unknown reason) timeout – specification of the maximum time the download can take (in seconds);...
  • Page 47: Faq And Technical Support

    9. FAQ and Technical Support The FAQ section of the Grisoft website (http://www.grisoft.com) provides answers to most issues that you may encounter while using AVG for Linux E-mail Server. If you do not find the solution of your problem in the FAQ section or documentation, contact the GRISOFT technical support department via e-mail at technicalsupport@grisoft.com.

This manual is also suitable for:

Anti-virus 7.1

Table of Contents