| NOD32 for Linux Mail Servers
|
| |
| NOD32 for Linux Mail Servers is
the best
antivirus system for e-mail servers running under the Linux
operating system. It supports most popular mail server software
(including Sendmail, Qmail, Postfix, Exim, etc.) and runs under all
of the common Linux distributions (RedHat, Mandrake, Suse, Debian
and others). Its unsurpassed scanning speed and detection rate,
combined with its very small footprint make NOD32 the ideal choice
for any Linux mail server. From lower-powered, small office mail
servers to enterprise-class ISP mail servers with thousands of
users, NOD32 for Linux Mail Servers delivers the performance and
scalability you expect from a Linux-based solution and the unequaled
security of NOD32. |
| |
| |
|
Key Features Include
- The NOD32 Scanning Engine algorithms provide both the
highest detection rate and the fastest scanning times.
- Includes unique advanced heuristics for Win32 worms and
backdoors.
- User-friendly installation and simple configuration.
- MTA-independent solution (mail server independent).
- Unpacks archived e-mail attachments without the need for any
external programs.
- Scanning requests are sent to the running daemon for
increased speed and efficiency.
- Various levels of logging can be configured.
- Does not require external libraries or programs except for
libc.
- Notification
- Possibility to write infiltration
information into e-mail header, footer and subject
Extra ISP Features (under development)
- Flexible setup of scanning parameters allows a different
configuration for each mailbox (account) via SQL database, LDAP,
or Radius server.
System Requirements
- OS Linux (Kernel 2.2.x, 2.4.x and 2.6.x, glibc
2.2.5 orhigher)
- Mail Transport Agent (e.g.: postfix, sendmail,
qmail, exim, etc.)
- Mail Delivery Agent (e.g.: maildrop, procmail,
deliver, local.mail)
- 5MB hard-disk space and 8MB RAM (does not
include the mail server memory requirements)
Distribution Packages
- RPM for RedHat, Mandrake and Suse distributions
- DEB for GNU/Linux Debian
- TGZ for all other Linux flavors
- TGZ for FreeBSD Unix OS.
|
| |
|
System Architecture
The system consists of two modules: the SMTP filter for outbound
messages, and the MDA wrapper for inbound messages, both described
below. The SMTP filter acts as a mail server performing antivirus
scanning. Before a mail message is dispatched, the NOD32 antivirus
daemon (nod32d) checks it for the presence of virus infections. If a
virus is detected, it is stopped, or an alternative action is
triggered based on the current setup parameters. The SMTP filter
works with one global configuration for all mailboxes and e-mail
addresses, in contrast to the MDA wrapper described below. The MDA
wrapper is activated like a standard MDA (maildrop, procmail, etc.).
It intercepts e-mail, scans it with the nod32d daemon and, based on
the scanning results, triggers a predefined action. If no infection
is detected, the message is forwarded to the standard MDA, which
delivers the message into proper mailbox. An individual set of
parameters for each mailbox is supported. |
| |
| Changelog |
| 2.51.1 |
- Implementation of maximum archives descension level of
scanner.
- Implementation of maximum scanning time (soft limit).
- Implementation of maximum unpacked archive size limit.
- Quarantine functionality implementation.
- Scanning system actions replaced by action_on_infected,
action_on_uncleanable, action_on_notscanned, with enhanced
functionality (clean, delete, accept, defer, discard, reject).
- Q-mail filter support enhanced (nod32pipe, nod32mda)
including content filtering.
- Pipelined SMTP communication support in nod32smtp.
- Support for logrotate of internal daemon logging output.
- nod32umc: selective download of groups of component modules.
- Samples submission system re-implemented as individual
process automanaged by main daemon.
- License expiration warning mechanism added.
- Better temporary files handling.
- Daemon--agent communication stability fixed.
- Support for scanning of uuencoded messages.
- nod32cli - writes infiltration name into the stdout.
|
| 2.15 |
- nod32d - memory allocation problems in archives support
fixed
- nod32d - support for selfextracting archives added
|
| |
| 2.14 |
- nod32d - logging format changed (nod32 build module number
'vdb' added)
- nod32d - memory allocation problems fixed
- nod32umc - return values problem fixed
- enhanced nod32lms documentation
- rpm package for RedHat Ready and (Novell) SuSE Ready added
(package nod32lms-rsr reflects specifications: RedHat Ready at
http://www.redhat.com/solutions/partners/rhrp and SuSE Ready at
http://www.novell.com/partners/isvihv/ready)
- nod32cli - initial version of nod32 command line intreface
agent
|
| |
| 2.13 |
- support for Linux Kernel 2.6.x
- nod32upd (possibility to create mirror even if base
directory is not defined)
- nod32smfi (abort of SMTP session fixed)
- footnote not written for digitally signed e-mails
|
| |
| 2.12 |
- nod32smfi - memory allocation problems fixed
- nod32d - logging of communication between daemon and agent
(level debug)
- guide.us.txt - documentation improved
|
| |
| 2.11 |
- nod32smfi as Sendmail's Content Filter added
|
| |
| 2.10 |
- nod32d (logging format changed)
- nod32unc (possibility of obsolete modules removal)
|
| |
| 2.09 |
- nod32d (zombie processes creation fixed)
|
| |
| 2.08 |
- nod32smtp (interpretation of nod32d return status "not
scanned " fixed)
- nod32d (new logging level introduced - "full")
- nod32d (logging via syslog facility)
|
| |
| 2.07 |
- nod32smtp (interpretation of nod32d return status "deleted"
fixed)
- nod32d (header and footer insertion into e-mail footnote
corrected)
|
| |
| 2.06 |
|
|
| |
| 2.05 |
|
|
| |
| 2.04 |
- update via http-proxy with basic authentication supported
- multiple levels of logging in update mirror creator
- status deleted added into
header and subject info
|
| |
| 2.03 |
- support for downloading NOD32 Version 2 updates (packed worm
scanner module)
|
| |
| 2.01 |
- notification
- possibility to write infiltration information
into e-mail header
|
| |
| 2.00 |
- support for downloading NOD32 Version 2 updates (including
archive module and other modules)
- advanced heuristics for Win32 worms
- multiple levels of logging
- possibility to write infiltration information into email
footer and subject
- enhanced configurability
|
