1. 1 Module 10 Managing Virus Protection

2. 2 ClamAV SCO OpenServer Postfix Apache ProFTP OpenLDAP Cyrus IMAP AMaViS Spam Assassin ClamAV

3. 3 Updating ClamAV Virus Definitions  Virus definitions are updated automatically  Cron job runs /opt/insight/bin/freshclam  Virus definition files:  /opt/insight/share/clamav/main.cvd  /opt/insight/share/clamav/daily.cvd  See freshclam(1)

4. 4 Exercise: Updating Virus Definitions  Consult the freshclam(1) manual page  Instruct freshclam(1) to download latest virus definitions into a directory  View the contents of the directory  See the latest virus definitions at www.clamav.net.

5. 5 Adding 3 rd Party Anti-Virus Scanners SCO OpenServer Postfix Apache ProFTP OpenLDAP Cyrus IMAP AMaViS Spam Assassin ClamAV Sophos

6. 6 Adding 3 rd Party Anti-Virus Scanners (cont.)  To replace ClamAV with Sophos:  Download and install Sophos  Comment out ClamAV lines in /opt/insight/etc/amavisd.conf  Uncomment Sohpos lines in /opt/insight/etc/amavisd.conf  Restart AMaViS

7. 7 Exercise: 3 rd Party Anti-Virus Scanners  View amavisd.conf comments which explain:  The syntax of @av_scanners entries  The relationship between @av_scanners and @av_scanners_backup

8. 8 Exercise: 3 rd Party Anti-Virus Scanners  Examine usage message from /usr/local/bin/sweep.