Module 10

1
Module 10

• Managing Virus Protection

2
ClamAV
Spam Assassin
ClamAV
Apache
ProFTP
OpenLDAP
Cyrus IMAP
AMaViS
Postfix
SCO OpenServer
3
Updating ClamAV Virus Definitions

• Virus definitions are updated automatically
• Cron job runs /opt/insight/bin/freshclam
• Virus definition files
• /opt/insight/share/clamav/main.cvd
• /opt/insight/share/clamav/daily.cvd
• See freshclam(1)

4
Exercise Updating Virus Definitions

• Consult the freshclam(1) manual page
• Instruct freshclam(1) to download latest virus
  definitions into a directory
• View the contents of the directory
• See the latest virus definitions at
  www.clamav.net.

5
Adding 3rd Party Anti-Virus Scanners
Spam Assassin
ClamAV
Sophos
Apache
ProFTP
OpenLDAP
Cyrus IMAP
AMaViS
Postfix
SCO OpenServer
6
Adding 3rd Party Anti-Virus Scanners (cont.)

• To replace ClamAV with Sophos
• Download and install Sophos
• Comment out ClamAV lines in /opt/insight/etc/amavi
  sd.conf
• Uncomment Sohpos lines in /opt/insight/etc/amavisd
  .conf
• Restart AMaViS

7
Exercise 3rd Party Anti-Virus Scanners

• View amavisd.conf comments which explain
• The syntax of _at_av_scanners entries
• The relationship between _at_av_scanners and
  _at_av_scanners_backup

8
Exercise 3rd Party Anti-Virus Scanners

• Examine usage message from /usr/local/bin/sweep.