Installing F-Secure® Anti-Virus (FSAV)
Last update: 17 July 2008
Please see also the LISTSERV/F-Secure FAQ
for further information.
The table below indicates the Web sites for F-Secure downloads.
|
Windows 2000/2003/XP |
|
NOTICE: Use of FSAV
7.00 and later requires, at minimum, LISTSERV version 15.0. Use of FSAV 5.52 requires, at minimum,
LISTSERV version 14.3. Issue a SHOW VERSION command to LISTSERV to ascertain your
product level BEFORE upgrading or installing FSAV. The current LISTSERV for Windows kit can be
downloaded at http://www.lsoft.com/download/listserv.asp#windows
. Installation kits: In the FSAV 5.52 for Windows Servers ftp://ftp.lsoft.com/F-Secure/fsavsrv552-12250-full.exe
(see below for hotfixes) - or - FSAV 7.01 for Windows Servers ftp://ftp.lsoft.com/f-secure/fsav4srv701-107-full.exe
(see below for hotfixes) In FSAV 5.52 for Windows Servers ftp://ftp.lsoft.com/F-Secure/fsavsrv552-12250-full.exe
(see below for hotfixes) -or- FSAV 7.01 for Windows Servers ftp://ftp.lsoft.se/f-secure/fsav4srv701-107-full.exe
(see below for hotfixes) Manuals: F-Secure Anti-Virus for Servers Online Help: http://www.f-secure.com/export/system/fsgalleries/manuals/fsavsrv700_help.pdf |
|
Linux-x86: |
|
NOTICE: Use of FSAV
4.65 requires, at minimum, LISTSERV version 14.3. Issue a SHOW LICENSE command to LISTSERV to
ascertain your product level BEFORE upgrading or installing FSAV 4.65. The current LISTSERV for Linux-Intel kit
can be downloaded at http://www.lsoft.com/download/listserv.asp#unix
. Installation kits: In the FSAV 4.65 for Linux Servers ftp://ftp.lsoft.com/F-Secure/fsav-linux-srv-4.65.5502-lsoft.tgz In FSAV 4.65 for Linux Servers ftp://ftp.lsoft.se/F-Secure/fsav-linux-srv-4.65.5502-lsoft.tgz Manuals: F-Secure Anti-Virus 4 documentation: http://www.f-secure.com/download-purchase/manuals/manpages/ |
In order to use LISTSERV®’s Anti-Virus features, F-Secure®
Anti-Virus must be installed on the same server as LISTSERV. If you already
have F-Secure Anti-Virus installed on the server, you should make sure that you
are running the version supported by LISTSERV:
·
For
Windows 2000 Server/2003 Server: version 7.01
·
For
Windows XP/2000 Professional: version 7.11.
NOTE: If you are running LISTSERV
under either of these operating systems, please see below.
·
For
Linux: version 4.65
Recommended FSAV versions for LISTSERV
14.3 through LISTSERV 14.5
·
L-Soft
strongly recommends that all such Windows LISTSERV sites upgrade to at least
version 5.52 (server) or 5.44 (workstation) with all hotfixes for those
versions released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av5-hotfixes.shtml
for applicable hotfixes).
·
L-Soft
strongly recommends that all such Linux-Intel LISTSERV sites upgrade to version
4.65, build 5502 (which contains the hotfixes described in F-Secure's security
bulletin FSC-2007-1) with all hotfixes for that version released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml)
for applicable hotfixes).
Recommended FSAV versions for LISTSERV
15.0 and following
·
L-Soft
strongly recommends that all such Windows LISTSERV sites upgrade to at least
version 7.01 (server) or 7.11 (workstation) with all hotfixes for those
versions released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av5-hotfixes.shtml
for applicable hotfixes).
·
L-Soft
strongly recommends that all such Linux-Intel LISTSERV sites upgrade to version
4.65, build 5502 (which contains the hotfixes described in F-Secure's security
bulletin FSC-2007-1) with all hotfixes for that version released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml)
for applicable hotfixes).
The FSAV for Windows Servers or FSAV for Linux Servers license key
provided by L-Soft is for a single stand-alone server only. If you wish to run
the
Additionally, the FSAV for Windows Servers key normally provided by
L-Soft is for the server version of F-Secure Anti-Virus. The server version will not install on a
workstation version of Windows (that is, Windows XP or Windows 2000
Professional). If you are affected by
this, please contact your sales representative for an FSAV for Windows
Workstations key.
The FSAV key provided by L-Soft is valid only as long as your paid
maintenance contract for LISTSERV is up-to-date. If you discontinue LISTSERV
maintenance, you must uninstall F‑Secure Anti‑Virus or purchase a
separate key from F-Secure.
If you wish to evaluate the F-Secure software, you can obtain a 30-day
evaluation key for FSAV from an L-Soft sales representative. Please note that only one 30-day evaluation
key can be provided (this is a limitation imposed by F-Secure, not by L-Soft).
F-Secure Hotfixes Recommended
Given our own experience and that of customers who have reported
problems to support, L-Soft strongly recommends that all currently-available
hotfixes for FSAV be installed.
Windows: FSAV hotfixes can be downloaded
from http://support.f-secure.com/enu/corporate/downloads/hotfixes/av5-hotfixes.shtml.
When downloading F-Secure hotfixes, be sure to choose the ones for standalone
environments, which are signified with this icon: 
Please check the F-Secure website
regularly for any hotfixes that may be provided.
Linux: FSAV hotfixes can be downloaded from http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml. Please check the F-Secure website
regularly for any hotfixes that may be provided.
F-Secure Anti-Virus Installation Instructions for Windows Servers
The following is a quick summary of steps to install F-Secure Anti-Virus
(from the stand-alone kit). If you need further clarification, please consult
the manuals cited in the table above.
1. Download the appropriate installation kit
for your platform (see table above).
2. Unzip the kit into a scratch directory.
3. CD into the scratch directory and run SETUP.EXE .
4. When prompted for a key, enter the F-Secure
key that you received from your L-Soft sales representative. If you did not
receive an F-Secure Anti-Virus key along with your LISTSERV LAK, please contact
your L-Soft sales representative.
5. When prompted for the Administration Method,
choose Stand-alone Installation.
6. When prompted to “Choose Products to Install”, select the F-Secure Management Agent
component in addition to the F-Secure Anti-Virus component.
Recommended F-Secure Settings under Windows
1. Real Time protection enabled (mandatory)
2. Action: "Delete
Automatically" (strongly recommended)
3. Scanning Options: "Files with these
extensions"
4. Scan inside compressed files:
"checked"
5. LISTSERV and/or LSMTP spool directories must
be exempted from scanning.
6. *.mail, *.mai
or *.job files must be exempted from scanning. (Technically
speaking, if you apply point 5, you should not have to explicitly exempt any
LISTSERV or LSMTP file types.)
7. We do not recommend (nor do F-Secure
recommend) that the "Scanning Options" box titled "All
files" be checked. This can lead to serious performance degradation
and is strongly discouraged.
Performance
Considerations under Windows
F-Secure Anti-Virus running on Windows provides an option
for “real-time protection”. This means that F-Secure will automatically check
any file matching the criteria configured. The “real-time protection” settings
that are set by default should work for most installations.
However please
note that L-Soft does STRONGLY recommend that you change the "Action to
take on infected files" to "Delete Automatically".
Otherwise, the “out‑of‑the‑box” settings
enable protection for all file extensions that are known to be susceptible to
viruses, on all directories on the server. As long as your LISTSERV maintenance
is up-to-date, you are entitled to protect the entire server on which LISTSERV
resides, not just LISTSERV itself, using the FSAV key provided by L-Soft.
Therefore, there is no need to change the settings, other than noted above.
If you do decide to change the real-time protection
settings, please keep the following in mind:
·
Requesting scanning for “All Files” may result in a
noticeable drop in performance.
If you
have real-time scanning enabled for “All Files”, without specifying exceptions,
then every file written on the server will be checked for viruses. This has the
potential to slow down the server in a situation where many files are written
continuously. In particular, an active LISTSERV site tends to create many files
containing incoming LISTSERV “jobs” and outgoing mail. To avoid performance
problems, avoid enabling automatic scanning of all files on the server.
·
At a minimum, you should keep real-time
scanning on for the EXE extension on the LISTSERV directory tree.
To do this, follow these steps:
1.
Double-click on the F-Secure logo in the Windows
Taskbar to bring up the F‑Secure Settings and Statistics applet.
2.
Select F-Secure Anti-Virus and press the
“Properties…” button.
3.
Go to the “Real-time protection” tab.
4.
Make sure “Enable protection” is checked, and select
an action to take on infected files (preferably other than “Report only”).
5.
Under “Scanning Options” select “Files with these
extensions” and enter “EXE” in the data entry box.
6.
Press the “OK” button to save the settings.
·
Some performance benefits may be found by excluding
“immune” folders from the real-time scanning.
You may
want to exclude certain folders that will never contain any files that are
prone to infection, for example folders that only contain text files. To
exclude folders: in the “Real-time protection” applet, under “Scanning options”
check the box for “Exclude objects (files, folders)”, then press the “Select…”
button. Next, select those folders that do not need to be scanned. LISTSERV’s
archive directories, for example, should never contain infected files unless
there are people or processes external to LISTSERV that use those directories
for other purposes.
F-Secure Anti-Virus Installation Instructions for Linux Servers
Upgrading from an earlier version of FSAV
F-Secure Anti-Virus for Linux 4.15 and earlier cannot be
upgraded. You will need to manually remove the previous version and
configuration data before installing this version.
You can uninstall the
previous version as follows:
1. Remove the fsavd
daemon's service definition by issuing the shell command `chkconfig -
2. Remove the
installation directory /usr/local/fsav, the configuration file /etc/fsav.conf
, the symbolic link to the binary /usr/local/bin/fsav and the symbolic link to
the manual page /usr/local/man/man1/fsav.1 .
3. Remove the crontab
entry that runs the hourly AV signature update.
If you happen to be
running FSAV 4.50 or later (which is unlikely unless you were a beta site, as
no later version than 4.15 was ever certified to work with LISTSERV), these
versions may be upgraded with the FSAV 4.65 kit. Simply run it as noted below.
F-Secure Anti-Virus Installation Instructions
Before starting to
install FSAV, make sure that you have your FSAV installation key from your
sales representative. The FSAV key is
normally sent with your LISTSERV LAK(s) but may be obtained separately if you
have not previously received it.
Please note that the
support department does not have access to, nor can it provide, either LISTSERV
LAKs or FSAV keys.
- Login as (or 'su' to) 'root' and
download the FSAV installation kit from the URL indicated in the table
above. We recommend creating a
directory called 'fsav' or similar and downloading the file to that
location.
- Expand the downloaded archive:
zcat
fsav-linux-srv-4.65.5502-lsoft.tgz | tar xvf -
This leaves the following files:
PACKING_LIST
fsav-linux-srv-4.65.5502.tar
readme.html (this
file)
fsavd-config.sh
- Expand the archived installation
kit.
tar
xvf fsav-linux-srv-4.65.5502.tar
This
creates a directory called 'fsav-srv-4.65' which contains
-rwxrwxr-x 1 1132 1100 12245957 Dec 15 2006 fsav-srv-4.65.5502
-rw-rw-r-- 1 1132 1100
20811 Jan 26 08:44 release-notes.txt
The
file called 'fsav-srv-4.65.5502' should have execute permission. (If it does not, chmod it appropriately.)
- Execute
the following commands:
cd fsav-srv-4.65
./fsav-srv-4.65.5502
The installation script will first ask you to provide the F-Secure license key (and please note that the key shown is only for illustration; it is not a valid key):
|
[sluggy]root:~/fsav-srv-4.65# ./fsav-srv-4.65.5502
F-Secure Anti-Virus for Linux Servers installation Copyright (c) 1999-2004 F-Secure Corporation. All
Rights Reserved. We will now ask you some questions regarding the
installation of this product. A default value will be shown in square brackets
after the question. To accept the default, just
press enter. To install F-Secure Anti-Virus, enter the keycode you have received
with your purchase or press enter to install evaluation version. keycode: 1234-5678-90AB-CDEF-GHIJ |
- The remainder of the installation
looks like the following. Normally
you should just accept the defaults.
Our inputs are shown in angle brackets and bolded, for example: <return>.
|
[Beginning of FSAV
installation script] Key accepted. Decrypting...done. Ok, link created.
|
- As noted, you can run 'crontab
-e' to add or
change the crontab entries for running FSAV full-machine scans or virus
signature database updates. For more information on 'crontab', see 'man
crontab'.
- Finally,
run (as 'root') the fsavd-config.sh
script (provided by L-Soft) which installs a modified 'fsavd' daemon
startup script into /etc/init.d ,
registers it as a system "service", and starts it. This script allows you to ensure that
the fsavd daemon starts when your machine is rebooted, and that it runs
under the 'listserv' UID. This is
required in order for LISTSERV to be able to "see" FSAV when it
starts up.
Note that you may have to issue the shell command chmod u+x fsavd-config.sh to make the shell script executable.
fsavd-config.sh makes one change to the fsavd startup script. One is to change
fsavuser=fsav
to
fsavuser=listserv
Please note carefully that this element of the installation is required. If you skip it, LISTSERV will not see FSAV at startup and LISTSERV's AV scanning feature will be disabled. It should be noted that this will NOT affect how fsavd reacts to requests from other users. F-Secure normally recommend that the fsavd daemon should run under a non-priviledged UID to begin with.
If you have installed LISTSERV to start under a different UID (not common), you will have to manually change the fsavuser= line in /etc/init.d/fsavd to the correct UID value and then stop and restart the 'fsavd' daemon. You can stop and restart the daemon from the shell prompt with "/sbin/service fsavd restart".
Recommended F-Secure Settings under Linux
The installed defaults under Linux are sufficient and should
not need to be altered.