Last updated 22 Feb 2018
LISTSERV has for many years and versions included an Anti-Virus Scanning feature for messages passing through the server. This is a value-added enhancement which requires a current (unexpired) maintenance agreement with L-Soft, and a copy of F-Secure Anti-Virus. At this writing the feature is only available for Windows 2008/2012/2016 (including R2) and Linux (RHEL/CentOS 6 and later, and similar distributions) running LISTSERV Classic or LISTSERV Classic HPO.
(Other OS platforms are supported through the LISTSERV AVS. There is no intent to make this functionality available in the Lite version of the product.)
L-Soft's regular support addresses are reserved for LISTSERV maintainers' use only. List owners should use alternate avenues (some listed below), and may not write directly to L-Soft for help.
NOTE: The links to F-Secure's website in this document were correct as of the last update of this document. L-Soft does not control F-Secure's website and cannot be responsible for outdated links to it. We will be happy to update this document with corrected links if broken links are reported. Thank you!
L-Soft's file download site (currently-certified FSAV versions available here)
With your paid maintenance, you will receive the following:
Other F-Secure Anti-Virus products, purchased separately directly from F-Secure, may work with LISTSERV as well, but are not certified by L-Soft, and there are no guarantees of interoperability.
Please refer to L-Soft's "Installing F-Secure Anti-Virus" guide for this information.
Issue a "SHOW VERSION" command to LISTSERV. The response should include a line like the following:
Virus database version: 2018-02-06 08:52:37 (F-Secure Anti-Virus 9.52)
Virus database version: 2017-03-23_12 (F-Secure Anti-Virus 11.10)
Under Windows, the version number shown may cause confusion. The version number "9.52" is correct; F-Secure Server Security 12.x (in this case, 12.12) reports the version of F-Secure Anti-Virus that is packaged into the Server Security suite. You can confirm that you are running Server Security 12.x by right-clicking the F-Secure shield icon in the system tray and choosing "About . . . ", which shows among other things
F-Secure Server Security 12.12 build
F-Secure Anti-Virus 9.52 build 240
When LISTSERV starts it sends the command "fsav /version" (Windows) or "fsav --version" (Linux) to FSAV. If there is a problem with the response, LISTSERV's AV scan feature will be disabled.
You must also have current paid maintenance for the AV scan feature to work. This means that for sites with perpetual (non-expiring) Product LAKs, an additional Maintenance LAK must be installed. (For sites with non-perpetual Product LAKs, your maintenance expires at the same time as your Product LAK.) To check your maintenance status, issue a SHOW LICENSE command to LISTSERV. There should be a line in the response that looks like this:
Maintenance until: 26 Nov 2018, serial number MNT-EXAMPLE-1
If the SHOW LICENSE output says
Maintenance until: No maintenance information
either your maintenance has expired or you have not received or applied your maintenance LAK. If you need a new maintenance LAK, please contact your L-Soft sales representative. (The support department cannot issue LAKs.)
If maintenance is current, try another stop/start of LISTSERV.
Check with email@example.com before doing so to make sure that it has been tested for use with LISTSERV. Please note that you will need a different F-Secure Anti-Virus license key from your Sales Representative before installing the latest version.
As of the date of this FAQ:
F-Secure Server Security Standard 12.12 is certified for use with LISTSERV 16.0-2014b or later for Windows Servers.* If you are running an earlier version and wish to upgrade, contact your sales representative for an F-Secure Server Security Standard 12.12 key.
F-Secure Linux Security (FSLS) 11.10 running as a command-line-only installation is certified for use with LISTSERV 16.0-2014b or later for Linux.* If you are running an earlier version and wish to upgrade, contact your sales representative for an FSLS 11.10 key. (The "full server" version of FSLS 11.10 is NOT supported for use with LISTSERV.)
* We recommend upgrading LISTSERV to at least version 16.0-2017a because of an incompatibility introduced between LISTSERV and the 10.x and later versions of the F-Secure products. The incompatibility may result in occasional spurious reports from LISTSERV of out-of-date anti-virus signatures. This incompatibility is fixed in LISTSERV version 16.0-2017a. To ensure that you have at least LISTSERV version 16.0-2017a, issue a SHOW LICENSE to your LISTSERV server. The build date reported should be 28 Feb 2017 or later. It should be noted that there are other important reasons to upgrade to LISTSERV 16.0-2017a – please see the release notes for more information.
Yes, to a limited extent, under Windows only. Please see the LISTSERV manuals for information on the FOREIGN_ANTI_VIRUS site configuration parameter and its use.
No, this is the default if you are running Classic or Classic HPO with current maintenance. LISTSERV checks for FSAV running on the server when it starts.
For Windows: Add
to your site.cfg file and restart LISTSERV.
For Linux: Add
to your go.user file and restart LISTSERV.
(Note: If this variable has been previously set via the web administration interface, you will need to set it there rather than in go.user.)
LISTSERV only checks the time stamp of the database files. It does not check the last time it was checked by the F-Secure Auto-Update Agent. In rare cases, F-Secure may not have a virus signature update for 5 days or longer, so when the database file is determined to be five days old, LISTSERV begins notifying the non-quiet postmaster(s) to alert them to a possible problem.
In this case you should do the following:
Windows: Check F-Secure's Automatic Update Agent to make sure that it is running. If it is, and if "fsav /version" reports that the signatures are up to date, then the warning can be ignored.
Linux: Check to make sure that the F-Secure Automatic Update Agent (fsaua) is running. This can be done with `service fsaua status` under Red Hat-like distributions. If it is, and if "fsav --version" reports that the signatures are up to date, then the warning can be ignored.
Yes, with the LICENSE_WARNING= site configuration variable (please see here for details). Please be aware this also turns off most LISTSERV license warnings, including warnings that inform you that your maintenance is about to expire, or that your product LAK is about to expire. It is L-Soft's strong recommendation that license warnings not be disabled under any circumstances, and then only with the understanding that you do so at your own risk.
Please note carefully that LISTSERV Lite does not support the virus scan feature.
Requirements to be able to run the AV scan feature are as follows:
Also see: F-Secure install documentation
It is always a good idea to upgrade to the latest current version of an AV scanning software because although the older version will continue to work, the newer version may have changes to combat emergent types of malignant code that can't easily be backported via hotfixes into the older version.
When L-Soft approves a particular version of FSAV, that means that version of FSAV has been thoroughly tested by L-Soft and is known to work properly with LISTSERV.
In order to ensure that you are able to benefit from the new description method and maintain the virus detection capability of your F-Secure Anti-Virus products at the highest level, you should verify that you are using the latest version of the software. You can check the version number of your Windows software by right-clicking the F-Secure icon on the system tray and selecting "About".
For both Windows and Linux, L-Soft strongly recommends that LISTSERV should be upgraded to the latest version of LISTSERV (at this writing, 16.0-2017a) before applying the latest F-Secure anti-virus products.
For Windows: If you are running LISTSERV 16.0-2014b or later, and have F-Secure Server Security Standard 12.12 in use, you do not need to do anything (although we recommend upgrading LISTSERV to at least 16.0-2017a for other important reasons – please see the release notes for more information).
If you are using older versions, we strongly recommend that you update both LISTSERV and F-Secure. LISTSERV 16.0-2014b or higher sites running earlier versions may at their option upgrade to F-Secure Server Security Standard 12.12; simply contact your sales representative for an F-Secure Server Security 12 key. L-Soft strongly recommends that any site running LISTSERV 16.0-2014b or later should upgrade to LISTSERV 16.0-2017a and the appropriate level of F-Secure Server Security Standard 12.x.
For Linux: If you are running LISTSERV 16.0-2014b or later and have F-Secure Linux Security 11.10 in use, you do not need to do anything (although we recommend upgrading LISTSERV to at least 16.0-2017a for other important reasons – please see the release notes for more information).
If you are using older versions, we strongly recommend that you update both LISTSERV and F-Secure. L-Soft strongly recommends that any site running LISTSERV 16.0-2014b or later should upgrade to LISTSERV 16.0-2017a and the appropriate level of F-Secure Linux Security 11.x.
Installation kits for the latest L-Soft certified versions of F-Secure Server Security Standard for Windows Servers and F-Secure Linux Security may be downloaded from L-Soft's FTP site at https://ftp.lsoft.com/f-secure , or from F-Secure's WebClub download site – Server Security (Windows) / Linux Security
Please contact your L-Soft sales representative to obtain an installation key for the appropriate version.
It is also important to check F-Secure's web site (see the links above for Server Security and Linux Security) regularly for product hotfixes (L-Soft does not mirror the hotfixes). Hotfixes are generally linked on the same web page as the anti-virus product to which they apply.
When downloading F-Secure hotfixes for Windows, be sure to choose the ones for standalone environments (the "fsfix" version of the hotfix). When fixes are available for FSLS for Linux, generally a complete installation kit is provided. Please check the F-Secure website regularly for any subsequent hotfixes that may be provided.
Special note for F-Secure Windows hotfixes: If your "fsfix" hotfix downloads as a .zip file, please do NOT open the .zip file or run any setup program it contains. Rename the file with an ".fsfix" extension and then simply double-click it. F-Secure has installed a file association for the .fsfix extension that allows the hotfix to be executed directly by F-Secure's hotfix installer. The hotfix will not install if run any other way.
The dbupdate utility has been superseded in current versions of F-Secure Linux Security by the F-Secure Automatic Update Agent (fsaua). If you are experiencing this problem, you are running an obsolete version of F-Secure anti-virus and should upgrade.
Starting with the release of F-Secure Client Security version 10, F-Secure no longer provided a standalone installation kit for the Client Security product. As noted above, this means that L-Soft can no longer provide an installation kit for those LISTSERV sites running on a Windows Workstation OS.
Sites running LISTSERV 16.0-2014b or later under a Windows Workstation variant such as Windows 7 or Windows 10 have the following options:
• Run LISTSERV with an antivirus product from another vendor that supports real-time scanning of compressed archives, by using the FOREIGN_ANTI_VIRUS site configuration parameter.
• Migrate the installation to a Windows Server platform.
If for any reason you need to uninstall F-Secure Linux Security, the documented procedure is as follows:
You can uninstall the product with the uninstall-fsav command-line command.
Run the following script as root user to uninstall the product: /opt/f-secure/fsav/bin/uninstall-fsav
The uninstall script does not remove configuration files. If you are sure that you do not need them anymore, remove all files in the /etc/opt/f-secure/fsma path.
It should be noted that the installation of current versions of F-Secure Linux Security do not require you to uninstall the previous version unless you are running a version earlier than 10.x. If you are running version earlier than 10.x, the current kit will not install and will tell you to uninstall the earlier version first.
Comments on this FAQ should be sent to firstname.lastname@example.org. Please do not send support or sales inquiries to this address--it is for comments on the manuals only. If you need to ask a question that is not covered by this FAQ, see the support options outlined at the top of the page.
LISTSERV is a registered trademark
licensed to L-Soft international, Inc.
All other trademarks, both marked and unmarked, are the property of their respective owners.
See Guidelines for Proper Usage of the LISTSERV Trademark for more details.