Antivirus Support¶
Plesk for Linux supports the following antivirus software:
- Premium Antivirus by Dr.Web
- Kaspersky Anti-Virus for Servers
- Sophos Anti-Virus for Servers
These solutions provide you with real-time mail traffic scanning and malware protection for customers. In this section, you will find detailed information on these antivirus solutions.
Kaspersky Anti-Virus for Servers¶
Kaspersky Anti-Virus is a module that scans incoming and outgoing mail traffic on your server, and removes malicious and potentially dangerous code from email messages. In order to use Kaspersky Anti-Virus with your Plesk server, you need to install the Kaspersky Anti-Virus module, then purchase and install a license key.
Kaspersky Anti-Virus is distributed as RPM (RHEL) and APT (Ubuntu/Debian) packages.
Kaspersky Anti-Virus Structure¶
Kaspersky Anti-Virus resides in the following directories in Plesk:
(Root directory)
/opt/kav/5.5/kav4mailservers
(Configuration file)
/etc/kav/5.5/kav4mailservers/kav4mailservers.conf
It contains parameters as
key=value
pairs grouped by sections. They define the operation of all Kaspersky Anti-Virus components. All configuration file parameters are grouped into sections, each of them corresponding to a particular component of the product.(Virus databases)
/var/db/kav/5.5/kav4mailservers/bases
(License keys directory)
/var/db/kav/5.5/kav4mailservers/licenses
Incoming and outgoing mail messages are processed like this:
- The stream of mail messages comes in from other servers or mail clients via the SMTP protocol.
- The mail system receives the mail traffic and passes it to Kaspersky Antivirus for scanning.
- The application processes the mail traffic according to the specified settings, and returns it to the mail system along with an additional set of notifications.
- The mail system routes the mail traffic to its destination.
Sophos Anti-Virus for Servers¶
Sophos Anti-Virus for Servers protects your mail server, scans incoming and outgoing mail traffic, and rejects malicious and potentially dangerous emails.
Sophos Anti-Virus for Servers is shipped with Plesk as RPM (RHEL) and APT (Ubuntu/Debian) packages.
Sophos Anti-Virus for Servers Structure¶
The location of the Sophos Anti-Virus configuration file may vary depending on your operating system. To find out the location, use the following command:
find / -name savdid.conf
/opt/plesk/sophosav/savdi/savdid.conf
Sophos Anti-Virus for Servers has the following log files:
/var/log/messages
/var/log/syslog
/var/log/maillog
You can increase the logs’ verbosity in savdid.conf
.
Sophos Anti-Virus for Servers has the following databases:
/opt/plesk/sophosav/sav
/opt/plesk/sophosav/ide
The databases are automatically updated every hour. To update them manually, run the following command:
/opt/plesk/sophosav/bin/updater
You can also check if automatic updates of the databases are working:
systemctl list-timers | grep sophos
To check the Sophos Anti-Virus database version, run the following command:
cat /opt/plesk/sophosav/sav/virusDataVersion.txt
Managing the Antivirus¶
To check if the Sophos Anti-Virus service is active, run the following command:
systemctl status plesk-sophos-av
Sophos Anti-Virus for Servers CLI¶
To see the help on the CLI usage, run the following command:
/opt/plesk/sophosav/bin/sophosmng help
Sophos Anti-Virus for Servers Limitations¶
It is not possible to select a global anti-virus mode for all mailboxes. To do so, you need to create a bash script to enable the anti-virus for multiple mailboxes, for example:
cat mailboxes.txt | while read i; do plesk bin mail -u $i -antivirus inout;done