parallels premium antivirus not working?

[Sven L.]

Hello,

I have some problems with the antivirus. basically, it's not working...

OS CentOS 6.4 (Final)
Panel version 11.5.30 Update #14, last updated at Sept 11, 2013 01:57 PM

there is a very well known virus that I receive a lot. it impersonates an email from UPS saying that there is a problem with your package and to open the attached zip file, which OFC has a virus.

so, this is what I could test (all test done in webmail):

- under no circumstances the email OR attachement is removed.
- the email doesnt have any sort of warning text or anything that clasifies it as virus

- with spam settings set to "mark mail with ****SPAM****" the mail is NOT clasified as spam or virus
- with spam setting to "move spam mail to spam folder" the mails ARE moved to the spam folder, even tho there is no header or text showing that it is a virus.


so, this is very strange, anyone knows what might be the issue here?
also, with "move spam mail to spam folder" there are no spam headers in the mails, but i already made a separate post for this particular issue.

 

[abdi]

Make sure it's running and rules updated ..

/etc/init.d/drwebd status

I personally like [Clam AntiVirus] since it also comes with an anti-malware feature where it can detect malware on the server like the php scripts that appear before your site is defaced

 

[Sven L.]

[root@vps01 ~]# /etc/init.d/drwebd status
Dr.Web drwebd is running

So, when I noticed that I am missing some options in the plesk panel that show up on the FAQ/HOWTO I realized I don't have any specific licence for the antivirus.

As far as I know, Parallels Premium Antivirus is shipped on all plesk licences for free for 15 mailboxes. Shouldn't it work and behave exactly the same for those 15 mailboxes than it is suposed to work as full version?

Anyways, ClamAV looks promising, but I haven't found the most basic information: cost. It looks to me that it is free? For unlimited mailboxes? Plus it can scan for infected php files?

 

[abdi]

Yes,ClamAV is FREE for Unlimited mailboxes plus it scans PHP files for malware ...If you need installation support, Level3 ticket here: http://www.jolis.net/packages.php?spt=47 would be sufficient!

 

[Sven L.]

one more question if you dont mind me abusing you a bit more...

i might have read this wrong or maybe the info i found is old... but it seems that clamav only works with qmail? not with postfix (out of the box)


i have found very easy install tutorials, but when i searched for clamav & postfix i got a huge very long tutorial, which makes me believe that clamav doesnt work with postfix so easily?

 

[abdi]

It works with Postfix just very well!

 

[Faris Raouf]

Some more details might be helpful here.

Clamav, by itself, will do nothing other than allow you to scan your filesystem. It does not automatically integrate with Plesk, qmail or postfix.

In order to get it working with qmail you'd also need to install qmail-scanner and for postfix, you'd need clapf. There are other alternatives too.

I don't know about clapf, but qmail-scanner expects a vanilla spamassassin installation because it sends email to be scanned via spamassassin as well as clamav. Normally this means removing the psa-spamassassin package. Also note that there are no GUI controls for spamassassin nor clamav when using qmail-scanner. Like I say, I don't know clapf but I assume it is similar.

The Atomic repo has qmail-scanner, clamav and, I think, clapf, for Centos 5 and 6, all of which are designed with Plesk in mind.

However, if you want your clients to have GUI control over anti-spam and anti-virus, my recommendation would be to stick to the Parallels offering and maybe get a key that enables more mailboxes to be scanned.