Operating systems
The integration was successfully tested on the following operating systems:

• Fedora Core 5
• Mandriva 2006
• Debian 3.1
• Ubuntu Server 6.06

Amavis
Amavisd-new version 2.4.2 must be used in this setup.

Antivirus products
One of the following antivirus products can be used:

• BitDefender
• Kaspersky Kav4Mailservers-linux
  

Note: Though tests were only performed with the products listed above, the integration should function with any of the antivirus products Amavis supports (Sophos, DrWeb, F-Secure, Symantec AV engine, F-PROT, Nod32, etc).

Setting-up Amavis

For the AXIGEN Mail Server and the desired antivirus product, please follow the installation procedure described in the user’s manual.

Dependencies
Amavisd-new requires the following software packages in order to run properly:

• PERL v5.8.2 or newer
• PERL modules:
  • Archive::Tar
  • Archive::Zip ver. 1.14 or newer
  • Compress::Zlib ver. 1.35 or newer
  • Convert::TNEF
  • Convert::UUlib ver. 1.05 or newer
  • MIME::Base64
  • MIME::Parser ver. 5.420 or newer
  • Mail::Internet ver. 1.58 or newer
  • Net::Server ver. 0.88 or newer
  • Net::SMTP ver.1.16 or newer
  • Digest::MD5 ver. 2.22 or newer
  • IO::Stringy
  • Time::HiRes ver. 1.49 or newer
  • Unix::Syslog
  • BerkeleyDB ver. 4.2 or newer
    

If you have all the dependencies properly installed, Amavis will run correctly.

Below you will find a list of distribution-specific instructions on how to make sure all the dependencies are installed. Make sure you have the specific package management tools (yum, apt-get, etc) installed and properly configured before continuing.

• Fedora Core 5

# yum -y install amavisd-new

# yum -y remove amavisd-new

• Mandriva 2006

# urpmi amavisd-new

# rpme -e amavisd-new

• Debian 3.1

# apt-get update

# apt-get -y install amavisd-new

# apt-get --purge -y remove amavisd-new

# dpkg -r --force-all libcompress-zlib-perl

# dpkg -i --force-all libcompress-zlib-perl_1.42-1_i386.deb

• Ubuntu Server 6.06

Run the following commands:

Download the 5.420 version of MIME-Tools perl module (from this link) and install it:

All the installation process must be performed while logged-in as the ‘root’ user.

1. Download and unpack amavis:

• Create temporary directory:

# mkdir /tmp/amavis/

• Go to the temporary directory

# cd /tmp/amavis/

• Download amavisd-new version 2.4.2:

# wget http://www.ijs.si/software/amavisd/amavisd-new-2.4.2.tar.gz

• Unpack the archive:

# tar -zxf amavisd-new-2.4.2.tar.gz

2. Set-up the Amavis environment

• Create a working dir for Amavis:

# mkdir /var/amavis /var/amavis/tmp /var/amavis/var /var/amavis/home

• Set permission for the Amavis working dirs:

# chown -R axigen:axigen /var/amavis

# chmod -R 750 /var/amavis

• Copy the amavisd binary to its new location:

# cp /tmp/amavis/amavisd-new-2.4.2/amavisd /usr/local/sbin/

• Set the ownership and permissions for /amavisd:

# chown root /usr/local/sbin/amavisd

# chmod 755 /usr/local/sbin/amavisd

• Copy the default config file to: /etc/amavisd.conf:

# cp /tmp/amavis/amavisd-new-2.4.2/amavisd.conf /etc/amavisd.conf

• Set the ownership and permissions for /etc/amavisd.conf:

# chown root /etc/amavisd.conf

# chmod 644 /etc/amavisd.conf

• Create the quarantine folder: /var/virusmails

# mkdir /var/virusmails

• Set the ownership and permissions for the quarantine directory:

# chown axigen:axigen /var/virusmail

# chmod 750 /var/virusmails

• Copy the amavis package contents to /usr/share/

# mkdir /usr/share/

# cp -Rp /tmp/amavis/amavisd-new-2.4.2 /usr/share/

3. Modify the amavis configuration

@bypass_spam_checks_maps = (1);

$myhostname = 'host.example.com';

$policy_bank{'AM.PDP-SOCK'} = { protocol=>'AM.PDP' };

$protocol='AM.PDP';

$virus_admin = "virusalert\@$mydomain";

undef $virus_admin;

Antivirus configuration

In order to install the desired antivirus, the procedure described in the user’s manual should be followed.

For the Kaspersky Kav4Mailservers, the following additional steps should be taken:

• Change the ownership on the Kaspersky directory

# chown -R axigen:axigen /opt/kav/

• In the Amavis configuration file (/etc/amavisd.conf) modify the path to Kav4Mailservers
  • Look for the ‘kav4mailservers’ section
  • Change '/opt/kav/bin/aveclient' to '/opt/kav/5.5/kav4mailservers/bin/aveclient'

AXIGEN configuration

A filter must be defined in order to instruct AXIGEN to send email messages to Amavis for scanning.

• Log into Webadmin using the "admin" account;
• Go to the ‘Server’ section;

1. Define the Amavis filter

• Click on the "Filters" page.
• Select the "Socket Filters" sub-page.
• Click the "Add new filter" button.
• Fill-in the following filter parameters:

name: amavis
address: inet://127.0.0.1:10024
protocolFile: /var/opt/axigen/filters/amavis.afsl
idleTimeout: 60
actionOnMatch: reject
maxConnections: 10

• Click the "Add" button.
• Click the "Commit" button.

2. Activate the Amavis filter

• Select the "Filters" tab again and
• Click the "Add new filter"
• Fill-in the following parameters:

priority: 100 or below,
filter type: "Socket"
filter name: "Amavis"
apply on relay: "no".

• Click the "Add" button
• Click the "Commit" button

Starting-up

# amavisd start

# /etc/init.d/axigen start

Testing the solution

1. Create a test user (or use an existing one) and logon using the Webmail interface. Alternatively you can use an email client such as Outlook or Thunderbird.
2. Compose an e-mail and send it to the inbox of the same user.
3. Compose another email and attach the EICAR test file (download from here).
4. You should not receive the second e-mail. The EICAR test file is a 'fake virus' created as a general test to see if your antivirus software is working correctly. This is NOT a live virus.
   

For further details, please visit the AXIGEN site.