CPanel And NOD32 Antivirus

[burachat]

Hi Guys , does anyone know how to configure NOD32 to work with Cpanel ? NOD32 has Linux Mail Server which is working with Exim but i see that Cpanel-Exim is not the normal one so i don't know where to change it . Or can we use Amavis or Mail Scanner that use NOD32 to scan the mail?

Please advise ,
Best Regards,
George

[chirpy]

MailScanner certainly can work with NOD32 according to the configuration files. I've no experience integrating NOD32 with Exim, though it may be possible depending on how it integrates. Do you have a URL to the configuration documentation?

[burachat]

Hi Chirpy ,

Thank you for the reply.

I think i already install MailScanner .... and using nod32 File server to scan it , but the result come out like this.

Nov 2 22:12:17 host MailScanner[29393]: New Batch: Scanning 1 messages, 12963 bytes
Nov 2 22:12:17 host MailScanner[29393]: Virus and Content Scanning: Starting
Nov 2 22:12:18 host MailScanner[29393]: Uninfected: Delivered 1 messages

but in that message i send the Eicar Test virus to it so it should detect as virus , right now the mail server still let the virus come in .

In what configuration , do i have to look at
-Exim?
-MailScanner?
-nod32-wrapper?

The thing is that i lost track , where should i start to check?

Please advise ,

[chirpy]

If you look in your MailScanner.conf, what do you have configured for:

Virus Scanners =

You should make sure that that is configured as (from the looks of it):

Virus Scanners = nod32-1.99

Then restart MailScanner if you change anything.

[burachat]

Hi Chirpy ,

I set to "nod32" but i change in the wrapper for the "nod32" to be "usr/sbin/"

when i test with this command it works

"/usr/mailscanner/lib/nod32-wrapper /usr/sbin /tmp"

It will scan all the /tmp folder.... but i don't know that it has to be nod32-1.99 or not , i 'll try and i'll post again.

Thank you.

[chirpy]

I wasn't sure about that setting, but whatever works. If you want to test it out, you can always email yourself the EICAR test virus:
http://eicar.org/anti_virus_test_file.htm

[burachat]

Hi Chirppy,

It works when i use that command , but it doesn't work in the real mail , seem that MailScanner is working but it doesn't scan the message or sth.

Like i told you before , the result is like this when i test with eicar.

Nov 2 22:12:17 host MailScanner[29393]: New Batch: Scanning 1 messages, 12963 bytes
Nov 2 22:12:17 host MailScanner[29393]: Virus and Content Scanning: Starting
Nov 2 22:12:18 host MailScanner[29393]: Uninfected: Delivered 1 messages

Please see whether you have faced this kind of problems or not.

Best Regards,
George

[chirpy]

It's not something I've seen before. I'd suggest that you have a look at and/or post to the MailScanner mailing list where you're more likely to find help specific to NOD32:
http://www.jiscmail.ac.uk/lists/mailscanner.html