ESET NOD32 Antivirus for Linux & BSD Mail Servers

---

The best antivirus protection for open source mail servers

NOD32 for Linux Mail Servers is the best antivirus system for e-mail servers running under the Linux operating system. Its unsurpassed scanning speed and detection rate, combined with its very small footprint make NOD32 the ideal choice. From lower-powered, small office mail servers to enterprise-class ISP mail servers with thousands of users, NOD32 for Linux Mail Servers delivers the performance and scalability you expect from a Linux-based solution, and the unmatched security of NOD32.

Antivirus features for mail servers include

• User-friendly installation and simple configuration.
• MTA-independent solution (mail server independent).
• Unpacks archived e-mail attachments without the need for any external programs.
• Scanning requests are sent to the running daemon for increased speed and efficiency.
• Various levels of logging can be configured.
• Does not require external libraries or programs except for libc.
• Supports writing infiltration information into e-mail header, footer and subject
• Multi-threaded
• Flexible setup of scanning parameters allows a different configuration for each mailbox (account) via SQL database, LDAP, or Radius server.

System Architecture Description

The system consists of two modules: the SMTP filter for outbound messages, and the MDA wrapper for inbound messages, both described below. The SMTP filter acts as a mail server performing antivirus scanning. Before a mail message is dispatched, the NOD32 antivirus daemon (nod32d) checks it for the presence of virus infections. If a virus is detected, it is stopped, or an alternative action is triggered based on the current setup parameters. The SMTP filter works with one global configuration for all mailboxes and e-mail addresses, in contrast to the MDA wrapper described below. The MDA wrapper is activated like a standard MDA (maildrop, procmail, etc.). It intercepts e-mail, scans it with the nod32d daemon and, based on the scanning results, triggers a predefined action. If no infection is detected, the message is forwarded to the standard MDA, which delivers the message into proper mailbox. An individual set of parameters for each mailbox is supported.

System Requirements

• OS Linux (Kernel 2.2.x, 2.4.x and 2.6.x, glibc 2.2.5 orhigher)
• Mail Transport Agent (e.g.: postfix, sendmail, qmail, exim, etc.)
• Mail Delivery Agent (e.g.: maildrop, procmail, deliver, local.mail)
• 5MB hard-disk space and 8MB RAM (does not include the mail server memory requirements)

Supported Distributions

NOD32 supports most popular mail server software (including Sendmail, Qmail, Postfix, Exim, etc.) and runs under all of the common Linux & BSD distributions.

• RedHat RPM
• Mandrake RPM
• Suse RPM
• Debian RPM
• Other Linux, via generic API in TGZ format
• FreeBSD Unix via TGZ format

NOD32 for Linux & BSD Servers FAQ

What's new?

• Single download package for mail and file servers
• New license key feature
• AMaViS integration documentation
• New 2nd option for on-access scanning
• Sample submission system
• X-header modification
• Multi-processor support
• Improved stability
• Configuration settings by individual account

How do I upgrade?
Backup your settings in the directory /etc/nod32 (or /etc/opt/eset/nod32)
To upgrade: uninstall all nod32lms, nod32lfs, nod32lup versions, install nod32ls
(nod32.cfg is backwards compatible)

How long will the old version be supported?
We support the last two versions.

If the mail and file server versions are in the same package, do I get both?
The mail and file server versions of NOD32 are still licensed separately, and each will require a key file for that part to work.

How does the new licensing work?
Your username and password are required to download updates (like before) but you must copy your license file to /etc/nod32/license, (or /etc/opt/eset/nod32/license) prior starting the daemon.

What happens if my NOD32LS license expires?
nod32d won't start. You won't be able to download updates.

Known issues?
Dazuko doesn't support ON_CLOSE events on Linux kernels 2.6.x
Multi-threaded Dazuko is not working on FreeBSD.

One of the new features is configuration by individual mail account. Where can I get documentation on how to do that?
See the nod32.cfg(5) manual page, under the section USER SPECIFIC CONFIGURATION.