{"id":654,"date":"2013-03-13T13:23:01","date_gmt":"2013-03-13T06:23:01","guid":{"rendered":"http:\/\/whplus.com\/blog\/?p=654"},"modified":"2013-03-21T10:32:02","modified_gmt":"2013-03-21T03:32:02","slug":"integrate-pure-ftpd-with-clamav-on-cpanel-server","status":"publish","type":"post","link":"https:\/\/www.whplus.com\/blog\/2013\/03\/13\/integrate-pure-ftpd-with-clamav-on-cpanel-server.html","title":{"rendered":"Integrate pure-ftpd with clamav on cpanel server"},"content":{"rendered":"

Clamav can work in conjunction with pure-ftpd to not allow virus\u2019s to be uploaded. Here are the steps. First install Clamav. In the example below clamav is installed in \/usr\/local\/bin but your set up may have it in \/usr\/bin<\/p>\n

\/etc\/pure-ftpd.conf<\/strong>
\nEdit \/etc\/pure-ftpd.conf and set<\/p>\n

CallUploadScript yes<\/span><\/p><\/blockquote>\n

\/etc\/init.d\/pure-ftpd<\/strong><\/p>\n

Edit \/etc\/init.d\/pure-ftpd<\/p>\n

Look for $DAEMONIZE $fullpath \/etc\/pure-ftpd.conf -O clf:\/var\/log\/xferlog $OPTIONS –daemonize<\/strong><\/p>\n

Under this add<\/p>\n

$DAEMONIZE \/usr\/sbin\/pure-uploadscript -B -r \/etc\/pure-ftpd\/clamscan.sh<\/span><\/p><\/blockquote>\n

Next look for kill $(cat \/var\/run\/pure-ftpd.pid)<\/strong>
\n
\nUnder this add<\/p>\n

kill $(cat \/var\/run\/pure-ftpd\/pure-uploadscript.pid)<\/span><\/p><\/blockquote>\n

\/etc\/pure-ftpd\/clamscan.sh<\/strong><\/p>\n

create new file named \/etc\/pure-ftpd\/clamscan.sh<\/p>\n

#!\/bin\/sh<\/span><\/p>\n

# \/usr\/local\/bin\/clamdscan is faster if clamd is running<\/span>
\n CLAMLOC=’\/usr\/local\/bin\/clamscan’;<\/span><\/p>\n

if [ ! -x $CLAMLOC ]; then<\/span>
\n echo ‘clamscan not found’;<\/span>
\n exit;<\/span>
\n fi<\/span>
\n if [ “$1” = “” ]; then<\/span>
\n echo ‘Variable is blank’;<\/span>
\n exit;<\/span>
\n fi<\/span>
\n if [ ! -f “$1” ]; then<\/span>
\n echo “$1 file not found”<\/span>
\n exit;<\/span>
\n fi<\/span><\/p>\n

# maybe you would prefer –move=\/DIRECTORY instead of remove<\/span>
\n $CLAMLOC –remove $1<\/span><\/p><\/blockquote>\n

and then chmod to 755<\/p>\n

The above calles –remove. This will of course delete the file if its detected as a virus. You may want to instead use –move<\/p>\n

–move=DIRECTORY
\nMove infected files into DIRECTORY. Directory must be writable
\nfor the ‘clamav’ user or unprivileged user running clamscan.<\/p>\n

Restart FTP<\/strong><\/p>\n

\/etc\/init.d\/pure-ftpd restart<\/span><\/p><\/blockquote>\n

Testing<\/strong><\/p>\n

Upload the EICAR test file to test if clamav is working<\/p>\n

X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*<\/span><\/p><\/blockquote>\n

Source: http:\/\/wiki.cpaneldirect.net\/wiki\/index.php?title=Integrate_pure-ftpd_with_clamav<\/p>\n","protected":false},"excerpt":{"rendered":"

Clamav can work in conjunction with pure-ftpd to not allow virus\u2019s to be uploaded. Here are the steps. First install Clamav. In the example below clamav is installed in \/usr\/local\/bin but your set up may have it in \/usr\/bin \/etc\/pure-ftpd.conf Edit \/etc\/pure-ftpd.conf and set CallUploadScript yes \/etc\/init.d\/pure-ftpd Edit \/etc\/init.d\/pure-ftpd Look for $DAEMONIZE $fullpath \/etc\/pure-ftpd.conf -O\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-654","post","type-post","status-publish","format-standard","hentry","category-tutorial"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t