|
1 |
|
2 This software is GPL2! |
|
3 |
|
4 This program is distributed in the hope that it will be useful, but WITHOUT |
|
5 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
6 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for |
|
7 more details. |
|
8 |
|
9 You MUST check your antivirus licence for the use with HAVP. Maybe you are |
|
10 not allowed to use it with HAVP. We don't take ANY WARRANTY!! |
|
11 |
|
12 |
|
13 |
|
14 UPGRADING |
|
15 ========= |
|
16 |
|
17 Just install HAVP normally. Your config will be preserved, but check |
|
18 havp.config for possible new options. Templates are overwritten, so if |
|
19 you have your own, make sure it is not in any default directory. |
|
20 |
|
21 |
|
22 |
|
23 BASIC INSTALLATION |
|
24 ================== |
|
25 |
|
26 HAVP has been tested only with GCC 3.4+. |
|
27 Other compilers like Sun Studio have some problems currently. |
|
28 |
|
29 Installation: |
|
30 |
|
31 # ./configure (if you don't want /usr/local, use --prefix=/other/path) |
|
32 # make |
|
33 # make install |
|
34 |
|
35 You can use the following path options in configure: |
|
36 |
|
37 --prefix base directory, default "/usr/local" |
|
38 --sbindir location of havp-binary, default "$prefix/sbin" |
|
39 --sysconfdir location of etc, default "$prefix/etc" (+ /havp) |
|
40 --localstatedir location of pidfile, default "/var" (+ /run/havp) |
|
41 |
|
42 Also "make install DESTDIR=/tmp/havp" is supported for helping |
|
43 in creating packages etc. |
|
44 |
|
45 It is recommended to create a havp user: |
|
46 |
|
47 # groupadd havp |
|
48 # useradd -g havp havp |
|
49 |
|
50 Check the configfile: /usr/local/etc/havp/havp.config |
|
51 |
|
52 If Linux is used, you need to enable mandatory locking for the partition |
|
53 where your tempfiles are located. Solaris supports mandatory locking |
|
54 without these extra steps: |
|
55 |
|
56 If you only have root partition available, you can enable mandatory |
|
57 locking support like this: |
|
58 |
|
59 # mount -o remount,mand / |
|
60 |
|
61 You can naturally use this for /var or any other partition. Also add |
|
62 mand-option to /etc/fstab so it will stay after reboot. |
|
63 |
|
64 Using tmpfs might have some problems, make sure you test it properly. |
|
65 |
|
66 NOTE: Mandatory locking could make it possible for evil local accounts |
|
67 to hang the system. You should run HAVP anyway on non-public server. |
|
68 |
|
69 Make sure the directories you are using have correct permissions: |
|
70 |
|
71 # chown havp /var/tmp/havp /var/log/havp /var/run/havp |
|
72 # chmod 700 /var/tmp/havp /var/log/havp /var/run/havp |
|
73 |
|
74 Start havp: |
|
75 |
|
76 # /usr/local/sbin/havp -c /path/to/config |
|
77 |
|
78 You can also install rc-script to your system from sources etc/init.d. |
|
79 |
|
80 If you have problems check the logfiles: |
|
81 |
|
82 /var/log/havp/havp.log |
|
83 /var/log/havp/access.log |
|
84 |
|
85 More information and help can be found at HAVP forum: http://havp.hege.li/ |
|
86 |
|
87 |
|
88 |
|
89 OS SPECIFIC INSTRUCTIONS |
|
90 ======================== |
|
91 |
|
92 Linux: |
|
93 ------ |
|
94 |
|
95 Use GCC 3.4+. |
|
96 |
|
97 Solaris 9: |
|
98 ---------- |
|
99 |
|
100 You may need lots of swap space if you use library scanners (ClamAV and |
|
101 Trophie). It wants to reserve it even when it is not really used. If there |
|
102 is not enough, you will get fork errors. Worst case formula: (20MB * |
|
103 USEDLIBRARYSCANNERS) * (USEDSCANNERS + 1) * SERVERNUMBER. |
|
104 |
|
105 GCC 3.4.2 from sunfreeware.com is recommended. |
|
106 |
|
107 You may need to fix GCC headers like this: |
|
108 |
|
109 # cd /usr/local/libexec/gcc/*/3.4.2/install-tools |
|
110 # ./mkheaders |
|
111 |
|
112 Solaris 10: |
|
113 ----------- |
|
114 |
|
115 Swap space is not an issue anymore. |
|
116 |
|
117 Use GCC 3.4.x that comes bundled at /usr/sfw/bin/gcc. |
|
118 It is installed from SUNWgcc package. |
|
119 |
|
120 FreeBSD: |
|
121 -------- |
|
122 |
|
123 Use GCC 3.4+ from ports. FreeBSD does not support mandatory locking, which |
|
124 means KEEPBACK settings can not be used (only TRICKLING is supported). This |
|
125 means everything is first downloaded fully and only then sent to client. |
|
126 |
|
127 You need to use --disable-locking option to compile. |
|
128 |
|
129 |
|
130 |
|
131 SCANNER SPECIFIC INSTRUCTIONS |
|
132 ============================= |
|
133 |
|
134 ClamAV |
|
135 ------ |
|
136 |
|
137 Library is used directly, so there is no need for clamd running. |
|
138 |
|
139 If you choose to use clamd (which is not recommended as library support has |
|
140 less overhead), you need to enable AllowSupplementaryGroups in clamd.conf, |
|
141 and add clamav user to havp group. |
|
142 |
|
143 |
|
144 |
|
145 == NOTICE: == |
|
146 You must check your antivirus license before using HAVP with commercial |
|
147 scanners. Usage might not be allowed. We do not give any warranty! |
|
148 |
|
149 |
|
150 Kaspersky |
|
151 --------- |
|
152 |
|
153 Tested with aveserver daemon found in Linux File Server and Linux Mail |
|
154 Server package. |
|
155 |
|
156 You should set ReportLevel=1 at [aveserver.report] section, so log will not |
|
157 fill disk. |
|
158 |
|
159 |
|
160 Trend Micro (Trophie) |
|
161 --------------------- |
|
162 |
|
163 /etc/iscan must point to the directory where libvsapi.so and |
|
164 virus patterns are located. Create link if necessary. |
|
165 |
|
166 Trend library is used directly, so daemon is not required to be running. |
|
167 You should naturally run some pattern update script, if Trend itself is |
|
168 not running. |
|
169 |
|
170 |
|
171 AVG |
|
172 --- |
|
173 |
|
174 Recommended changes to avg.conf (version 7.5): |
|
175 |
|
176 [AvgCommon] |
|
177 |
|
178 heuristicAnalysis = 1 |
|
179 processesArchives = 1 |
|
180 |
|
181 [AvgDaemon] |
|
182 |
|
183 # Raise number of daemons atleast equal to SERVERNUMBER/MAXSERVERS |
|
184 numOfDaemons = xx |
|
185 |
|
186 |
|
187 F-Prot |
|
188 ------ |
|
189 |
|
190 Supported. |
|
191 |
|
192 |
|
193 NOD32 |
|
194 ----- |
|
195 |
|
196 Tested with Linux Mail Server and Linux File Server packages. |
|
197 File Server version can not display virus names. |
|
198 |
|
199 For version 3.0+, see settings in /etc/esets/esets.cfg (num_thrd etc). Also |
|
200 you want to disable syslogging. |
|
201 |
|
202 |
|
203 Sophos (Sophie) |
|
204 --------------- |
|
205 |
|
206 You need to make sure Sophie is working first, you can get it from: |
|
207 http://www.clanfield.info/sophie/ |
|
208 |
|
209 Change user or group to havp user in sophie.cfg, so it can read tempfiles. |
|
210 Also change maxproc value to atleast SERVERNUMBER/MAXSERVERS value! |
|
211 |
|
212 |
|
213 Avast! |
|
214 ------ |
|
215 |
|
216 Linux/Unix Servers version is required. |
|
217 |
|
218 Recommended changes to avastd.conf: |
|
219 |
|
220 # Raise number to atleast equal of SERVERNUMBER |
|
221 daemoncount = XX |
|
222 # Raise number to atleast equal of MAXSERVERS |
|
223 maxdaemoncount = XX |
|
224 archivetype = A |
|
225 testall = 1 |
|
226 testfull = 0 |
|
227 |
|
228 |
|
229 Arcavir |
|
230 ------- |
|
231 |
|
232 Start arcavird with enough processes, like "arcavird 16". |
|
233 |
|
234 |
|
235 DrWeb |
|
236 ----- |
|
237 |
|
238 Recommended changes to drweb32.ini: |
|
239 |
|
240 ; Raise number to atleast equal of SERVERNUMBER |
|
241 MaxChildren = xx |
|
242 PreFork = Yes |
|
243 |
|
244 |