Installation Instructions
 
  1. Execute the downloaded script: /bin/sh nod32lms-*.bin
  2. Press Enter and read the Licence Agreement
  3. If you accept it, press 'y'
  4. You will find a package/archive in the current directory, install as usual using rpm, dpkg or extracting
 
NOD32 for Linux Mail Servers
 
NOD32 for Linux Mail Servers is the best antivirus system for e-mail servers running under the Linux operating system. It supports most popular mail server software (including Sendmail, Qmail, Postfix, Exim, etc.) and runs under all of the common Linux distributions (RedHat, Mandrake, Suse, Debian and others). Its unsurpassed scanning speed and detection rate, combined with its very small footprint make NOD32 the ideal choice for any Linux mail server. From lower-powered, small office mail servers to enterprise-class ISP mail servers with thousands of users, NOD32 for Linux Mail Servers delivers the performance and scalability you expect from a Linux-based solution and the unequaled security of NOD32.
 
 

Key Features Include

  • The NOD32 Scanning Engine algorithms provide both the highest detection rate and the fastest scanning times.
  • Includes unique advanced heuristics for Win32 worms and backdoors.
  • User-friendly installation and simple configuration.
  • MTA-independent solution (mail server independent).
  • Unpacks archived e-mail attachments without the need for any external programs.
  • Scanning requests are sent to the running daemon for increased speed and efficiency.
  • Various levels of logging can be configured.
  • Does not require external libraries or programs except for libc.
  • Notification
  • Possibility to write infiltration information into e-mail header, footer and subject

Extra ISP Features (under development)

  • Flexible setup of scanning parameters allows a different configuration for each mailbox (account) via SQL database, LDAP, or Radius server.

System Requirements

  • OS Linux (Kernel 2.2.x, 2.4.x and 2.6.x, glibc 2.2.5 orhigher)
  • Mail Transport Agent (e.g.: postfix, sendmail, qmail, exim, etc.)
  • Mail Delivery Agent (e.g.: maildrop, procmail, deliver, local.mail)
  • 5MB hard-disk space and 8MB RAM (does not include the mail server memory requirements)

Distribution Packages

  • RPM for RedHat, Mandrake and Suse distributions
  • DEB for GNU/Linux Debian
  • TGZ for all other Linux flavors
  • TGZ for FreeBSD Unix OS.
 

System Architecture

The system consists of two modules: the SMTP filter for outbound messages, and the MDA wrapper for inbound messages, both described below. The SMTP filter acts as a mail server performing antivirus scanning. Before a mail message is dispatched, the NOD32 antivirus daemon (nod32d) checks it for the presence of virus infections. If a virus is detected, it is stopped, or an alternative action is triggered based on the current setup parameters. The SMTP filter works with one global configuration for all mailboxes and e-mail addresses, in contrast to the MDA wrapper described below. The MDA wrapper is activated like a standard MDA (maildrop, procmail, etc.). It intercepts e-mail, scans it with the nod32d daemon and, based on the scanning results, triggers a predefined action. If no infection is detected, the message is forwarded to the standard MDA, which delivers the message into proper mailbox. An individual set of parameters for each mailbox is supported.
 
Changelog
 
2.15
  • nod32d - memory allocation problems in archives support fixed
  • nod32d - support for selfextracting archives added
 
2.14
  • nod32d - logging format changed (nod32 build module number 'vdb' added)
  • nod32d - memory allocation problems fixed
  • nod32umc - return values problem fixed
  • enhanced nod32lms documentation
  • rpm package for RedHat Ready and (Novell) SuSE Ready added (package nod32lms-rsr reflects specifications: RedHat Ready at http://www.redhat.com/solutions/partners/rhrp and SuSE Ready at http://www.novell.com/partners/isvihv/ready)
  • nod32cli - initial version of nod32 command line intreface agent
 
2.13
  • support for Linux Kernel 2.6.x
  • nod32upd (possibility to create mirror even if base directory is not defined)
  • nod32smfi (abort of SMTP session fixed)
  • footnote not written for digitally signed e-mails
 
2.12
  • nod32smfi - memory allocation problems fixed
  • nod32d - logging of communication between daemon and agent (level debug)
  • guide.us.txt - documentation improved
 
2.11
  • nod32smfi as Sendmail's Content Filter added
 
2.10
  • nod32d (logging format changed)
  • nod32unc (possibility of obsolete modules removal)
 
2.09
  • nod32d (zombie processes creation fixed)
 
2.08
  • nod32smtp (interpretation of nod32d return status "not scanned " fixed)
  • nod32d (new logging level introduced - "full")
  • nod32d (logging via syslog facility)
 
2.07
  • nod32smtp (interpretation of nod32d return status "deleted" fixed)
  • nod32d (header and footer insertion into e-mail footnote corrected)
 
2.06
  • e-mail parsing fixed
 
2.05
  • minor bugs fixed
 
2.04
  • update via http-proxy with basic authentication supported
  • multiple levels of logging in update mirror creator
  • status deleted added into header and subject info
 
2.03
  • support for downloading NOD32 Version 2 updates (packed worm scanner module)
 
2.01
  • notification
  • possibility to write infiltration information into e-mail header
 
2.00
  • support for downloading NOD32 Version 2 updates (including archive module and other modules)
  • advanced heuristics for Win32 worms
  • multiple levels of logging
  • possibility to write infiltration information into email footer and subject
  • enhanced configurability