Clamav can work in conjunction with pure-ftpd to not allow virus\u2019s to be uploaded. Here are the steps. First install Clamav. In the example below clamav is installed in \/usr\/local\/bin but your set up may have it in \/usr\/bin<\/p>\n
\/etc\/pure-ftpd.conf<\/strong> CallUploadScript yes<\/span><\/p><\/blockquote>\n \/etc\/init.d\/pure-ftpd<\/strong><\/p>\n Edit \/etc\/init.d\/pure-ftpd<\/p>\n Look for $DAEMONIZE $fullpath \/etc\/pure-ftpd.conf -O clf:\/var\/log\/xferlog $OPTIONS –daemonize<\/strong><\/p>\n Under this add<\/p>\n $DAEMONIZE \/usr\/sbin\/pure-uploadscript -B -r \/etc\/pure-ftpd\/clamscan.sh<\/span><\/p><\/blockquote>\n Next look for kill $(cat \/var\/run\/pure-ftpd.pid)<\/strong> kill $(cat \/var\/run\/pure-ftpd\/pure-uploadscript.pid)<\/span><\/p><\/blockquote>\n \/etc\/pure-ftpd\/clamscan.sh<\/strong><\/p>\n create new file named \/etc\/pure-ftpd\/clamscan.sh<\/p>\n #!\/bin\/sh<\/span><\/p>\n # \/usr\/local\/bin\/clamdscan is faster if clamd is running<\/span> if [ ! -x $CLAMLOC ]; then<\/span> # maybe you would prefer –move=\/DIRECTORY instead of remove<\/span> and then chmod to 755<\/p>\n The above calles –remove. This will of course delete the file if its detected as a virus. You may want to instead use –move<\/p>\n –move=DIRECTORY Restart FTP<\/strong><\/p>\n \/etc\/init.d\/pure-ftpd restart<\/span><\/p><\/blockquote>\n Testing<\/strong><\/p>\n Upload the EICAR test file to test if clamav is working<\/p>\n X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*<\/span><\/p><\/blockquote>\n Source: http:\/\/wiki.cpaneldirect.net\/wiki\/index.php?title=Integrate_pure-ftpd_with_clamav<\/p>\n","protected":false},"excerpt":{"rendered":" Clamav can work in conjunction with pure-ftpd to not allow virus\u2019s to be uploaded. Here are the steps. First install Clamav. In the example below clamav is installed in \/usr\/local\/bin but your set up may have it in \/usr\/bin \/etc\/pure-ftpd.conf Edit \/etc\/pure-ftpd.conf and set CallUploadScript yes \/etc\/init.d\/pure-ftpd Edit \/etc\/init.d\/pure-ftpd Look for $DAEMONIZE $fullpath \/etc\/pure-ftpd.conf -O\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-654","post","type-post","status-publish","format-standard","hentry","category-tutorial"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/comments?post=654"}],"version-history":[{"count":2,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/654\/revisions"}],"predecessor-version":[{"id":660,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/654\/revisions\/660"}],"wp:attachment":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/media?parent=654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/categories?post=654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/tags?post=654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nEdit \/etc\/pure-ftpd.conf and set<\/p>\n
\n
\nUnder this add<\/p>\n
\n CLAMLOC=’\/usr\/local\/bin\/clamscan’;<\/span><\/p>\n
\n echo ‘clamscan not found’;<\/span>
\n exit;<\/span>
\n fi<\/span>
\n if [ “$1” = “” ]; then<\/span>
\n echo ‘Variable is blank’;<\/span>
\n exit;<\/span>
\n fi<\/span>
\n if [ ! -f “$1” ]; then<\/span>
\n echo “$1 file not found”<\/span>
\n exit;<\/span>
\n fi<\/span><\/p>\n
\n $CLAMLOC –remove $1<\/span><\/p><\/blockquote>\n
\nMove infected files into DIRECTORY. Directory must be writable
\nfor the ‘clamav’ user or unprivileged user running clamscan.<\/p>\n