BitDefender for Sambadownload.bitdefender.com/resources/files/Download/uk/BitDefender … · BitDefender for Samba Linux File Servers Install Before you begin the installation process,

BitDefender for Samba Linux File Servers SOFTWIN

User’s guide

BitDefender for Samba Linux File Servers

Contents

Contents ................................................................................................................ 2

License and Warranty........................................................................................... 4

Installation............................................................................................................. 7

Package naming...........................................................................................................7 System requirements ...................................................................................................7 Install ............................................................................................................................8 Uninstall........................................................................................................................9

What is BitDefender for Samba Linux File Servers? ....................................... 10

Configuration under Linux................................................................................. 12

NetProtect ..................................................................................................................12 Registry ..............................................................................................................12 Core....................................................................................................................13 AV7 – The heart of BitDefender .........................................................................13 Logging & e-mail notification ..............................................................................15 Real Time Virus Report (RTVR) .........................................................................20 Agents ................................................................................................................21

Live.............................................................................................................................24 Automatic update................................................................................................24 Manual update....................................................................................................26 Patches...............................................................................................................27

Product registration ....................................................................................................28 More info about BitDefender status............................................................................29

Web-based configuration................................................................................... 31

The webmin module installation .................................................................................31 Uninstalling the BitDefender webmin module.............................................................32 Accessing the BitDefender webmin module...............................................................32

Configuration under Windows........................................................................... 34

The Management Console installation .......................................................................34 Uninstalling, repairing or modifying BitDefender Management Console ....................36 Accessing the Management Console.........................................................................37 Selecting the action on infected messages ................................................................39

Select the action on infected messages .............................................................39

2

BitDefender for Samba Linux File Servers Select the location for the quarantine area.........................................................40

Sending alarm messages in case of infection ............................................................41 Updating the product ..................................................................................................43 Viewing the reports and the statistics.........................................................................45 Product registration ....................................................................................................46

Frequently Asked Questions ............................................................................. 47

Contact information............................................................................................ 49

3


License and Warranty IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS DO NOT INSTALL THE SOFTWARE. BY CLICKING "I ACCEPT", "OK", "CONTINUE", "YES" OR BY INSTALLING OR USING THE SOFTWARE IN ANY WAY, YOU ARE INDICATING YOUR COMPLETE UNDERSTANDING AND ACCEPTANCE OF THE TERMS OF THIS AGREEMENT. This License Agreement is a legal agreement between you (either an individual or a single entity end user) and SOFTWIN for use of the SOFTWIN software product identified above, which includes computer software and may include associated media, printed materials, and "online" or electronic documentation ("BitDefender"), all of which are protected by U. S. and international copyright laws and international treaty protection. By installing, copying, or otherwise using the BitDefender, you agree to be bound by the terms of this agreement. If you do not agree to the terms of this agreement, do not install or use the BitDefender; you may, however, return it to your place of purchase for a full refund within 30 days after your purchase. Verification of your purchase may be required. BitDefender License BitDefender is protected by copyright laws and international copyright treaties, as well as other intellectual property laws and treaties. The BitDefender is licensed, not sold. GRANT OF LICENSE. SOFTWIN hereby grants you and only you the following non-exclusive license to use BitDefender: APPLICATION SOFTWARE. You may install and use one copy of the BitDefender, or any prior version for the same operating system, on a single computer terminal. The primary user of the computer on which the BitDefender is installed may make one additional (i.e. second) copy for his or her exclusive use on a portable computer. NETWORK USE. You may also store or install a copy of the BitDefender on a storage device, such as a network server, used only to install or run the BitDefender on your other computers over an internal network; however, you must purchase and dedicate a separate license for each separate computer terminal on which the BitDefender is installed or run from the storage device. A license for the BitDefender may not be shared or used concurrently on different computers or computer terminals. You should purchase a license pack if you require multiple licenses for use on multiple computers or computer terminals. LICENSE PACKS. If you purchase a License Pack and you have acquired this License Agreement for multiple licenses of BitDefender, you may make the number of additional copies of the computer software portion of the BitDefender specified above as "Licensed copies." You are also entitled to make a corresponding number of secondary copies for portable computer use as specified above in the section entitled "Application Software".

4

BitDefender for Samba Linux File Servers TERM OF LICENSE. The license granted hereunder shall commence on the date that you install, copy or otherwise first use BitDefender and shall continue only on the computer on which it is initially installed. UPGRADES. If the BitDefender is labeled as an upgrade, you must be properly licensed to use a product identified by SOFTWIN as being eligible for the upgrade in order to use the BitDefender. A BitDefender labeled as an upgrade replaces and/or supplements the product that formed the basis for your eligibility for the upgrade. You may use the resulting upgraded product only in accordance with the terms of this License Agreement. If the BitDefender is an upgrade of a component of a package of software programs that you licensed as a single product, the BitDefender may be used and transferred only as part of that single product package and may not be separated for use on more than one computer. COPYRIGHT. All right, title and interest in and to BitDefender and all copyright rights in and to the BitDefender (including but not limited to any images, photographs, logos, animations, video, audio, music, text, and "applets" incorporated into the BitDefender), the accompanying printed materials, and any copies of the BitDefender are owned by SOFTWIN. The BitDefender is protected by copyright laws and international treaty provisions. Therefore, you must treat the BitDefender like any other copyrighted material except that you may install the BitDefender on a single computer provided you keep the original solely for backup or archival purposes. You may not copy the printed materials accompanying the BitDefender. You must produce and include all copyright notices in their original form for all copies created irrespective of the media or form in which BitDefender exists. You may not sub-license, rent, sell, or lease BitDefender. You may not reverse engineer, recompile, disassemble, create derivative works, modify, translate, or make any attempt to discover the source code for BitDefender. LIMITED WARRANTY. SOFTWIN warrants that the media on which BitDefender is distributed is free from defects for a period of thirty days from the date of delivery of BitDefender to you. Your sole remedy for a breach of this warranty will be that SOFTWIN, at its option, may replace the defective media upon receipt of the damaged media, or refund the money you paid for BitDefender. SOFTWIN does not warrant that BitDefender will be uninterrupted or error free or that the errors will be corrected. SOFTWIN does not warrant that BitDefender will meet your requirements. SOFTWIN HEREBY DISCLAIMS ALL OTHER WARRANTIES FOR BITDEFENDER, WHETHER EXPRESSED OR IMPLIED. THE ABOVE WARRANTY IS EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES, WHETHER EXPRESSED OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS. YOU MAY HAVE OTHER RIGHTS, WHICH VARY FROM STATE TO STATE.

5

BitDefender for Samba Linux File Servers DISCLAIMER OF DAMAGES. Anyone using, testing, or evaluating BitDefender bears all risk to the quality and performance of BitDefender. In no event shall SOFTWIN be liable for any damages of any kind, including, without limitation, direct or indirect damages arising out of the use, performance, or delivery of BitDefender, even if SOFTWIN has been advised of the existence or possibility of such damages. SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU. IN NO CASE SHALL SOFTWIN'S LIABILITY EXCEED THE PURCHASE PRICE PAID BY YOU FOR BITDEFENDER. The disclaimers and limitations set forth above will apply regardless of whether you accept or use, evaluate, or test BitDefender. IMPORTANT NOTICE TO USERS. THIS SOFTWARE IS NOT FAULT-TOLERANT AND IS NOT DESIGNED OR INTENDED FOR USE IN ANY HAZARDOUS ENVIRONMENT REQUIRING FAIL-SAFE PERFORMANCE OR OPERATION. THIS SOFTWARE IS NOT FOR USE IN THE OPERATION OF AIRCRAFT NAVIGATION, NUCLEAR FACILITIES, OR COMMUNICATION SYSTEMS, WEAPONS SYSTEMS, DIRECT OR INDIRECT LIFE-SUPPORT SYSTEMS, AIR TRAFFIC CONTROL, OR ANY APPLICATION OR INSTALLATION WHERE FAILURE COULD RESULT IN DEATH, SEVERE PHYSICAL INJURY OR PROPERTY DAMAGE. GOVERNMENT RESTRICTED RIGHTS/RESTRICTED RIGHTS LEGEND. Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 or subparagraphs (c)(1) and (2) of Commercial Computer Software-Restricted Rights clause at 48 CFR 52.227-19, as applicable. Contact SOFTWIN, at Fabrica de Glucoza St., No 5, 72322-Sect.2, Bucharest, Romania, or at Tel No: 40-21-2330780, Fax:40-21-2330763 GENERAL. This Agreement will be governed by the laws of Romania and by the international copyright regulations and treaties. This Agreement may only be modified by a license addendum, which accompanies this Agreement or by a written document which has been signed, by both you and SOFTWIN. This Agreement has been written in the English language only and is not to be translated or interpreted in any other language. Prices, costs and fees for use of BitDefender are subject to change without prior notice to you. In the event of invalidity of any provision of this Agreement, the invalidity shall not affect the validity of the remaining portions of this Agreement. BitDefender and BitDefender logos are trademarks of SOFTWIN. All other trademarks are the property of their respective owners.

6


Installation Package naming BitDefender for Samba Linux File Servers package is named considering the following parameters: BitDefender-samba-{version}.{os}.{architecture}.{package type}.run Variable Description {version} is the package version. For example, 1.6.2-1 is version 1, subversion

6.2, package build 1. {os} is Linux for the moment, *BSD and other Unices will be available

soon. Linux has 2 versions - one compiled with gcc 2.9x and the other with gcc 3.x. Choose the appropriate version for your system.

{architecture} is the processor type. i586 is the current development version. It will work on Intel Pentium II, Pentium III, Penium IV, AMD alternatives and other compatible processors.

{package type} refers to the package management tool we use in order to install the files on your computer. This is one of rpm, deb or tar. rpm uses the Red Hat Package Manager, deb uses dpkg and tar is the most portable method. Please note that, however, the tar packages do not contain source code. Please install the appropriate package for your system.

System requirements Before installing BitDefender for Samba Linux File Servers, you must first verify if the company’s file server meets the following system requirements: Processor: minimum Pentium II 500 MHz (800 Recommended processor) RAM: minimum 64 MB of memory (128 MB Recommended) Disk space: minimum 20 MB Operating system: Linux distribution with kernel v. 2.2, 2.4 or 2.6 and glibc minimum v.2.2.3. Samba package installed with built-in support for VFS and ACL. In the Configuration under Windows section, you will find the system requirements for the Management Console installation. BitDefender requires the standard c++ libraries. You have to make sure these are installed. Please check the file libstdc++.so.5 is present on your system or you have installed a package named similarly to the file mentioned.

7

BitDefender for Samba Linux File Servers Install Before you begin the installation process, we recommend you to check that the installation kit is not corrupted (this can happened sometimes, especially if you dowloaded it). Please run: sh ./BitDefender-samba-{version}.{os}.{architecture}.{package type}.run --check The answer should be: Verifying archive integrity.. MD5 checksums are OK. All good. If you get a different answer, please re-download the installation kit. All packages, regardless of the {package type}, are installed using: sh ./BitDefender-samba-{version}.{os}.{architecture}.{package type}.run For example, if you want to install using the rpm-based package, run this: sh ./BitDefender-samba-1.5.1-5.linux.i586.rpm.run in the directory where the package is located. Nota: If you would like to see all the install options run: sh ./BitDefender-samba-{version}.{os}.{architecture}.{package type}.run --help This will unpack the BitDefender packages, and will launch the install script, that will in turn install the BitDefender components. These are: BitDefender-engines, BitDefender-core and BitDefender-samba. Please follow the instructions exactly during the installation process. Due to the internal Samba architecture, the file generally named bdvfs.so can integrate with only one version of Samba, the one it was built for. Therefore the full file name respects the following rule: bdvfs-{samba_version}-{gcc_version}.so, where {gcc_version} can take the values 2 or 3, according to GCC version the package was compiled with, and {samba_version} represents the version of Samba the module was built for, such as 3.0.10. If the package does not contain the VFS module you need for your Samba server, please use the vfs source provided in /opt/BitDefender/src and compile the module against the sources of Samba currently installed on your system. You can find more information in the documentation accompanying the vfs source. After the installation you will get an up and running file server virus scanner. To complete the configuration and protect the shares, you have to add a line to /etc/samba/smb.conf file in the desired [share] section or, eventually, in the [global] section to protect some or all of the shares. For Samba version 2.x, the module may be installed no matter where and this line should contain the full path to it, such as (please pay attention to the version numbers, as mentioned before): vfs object = /opt/BitDefender/lib/bdvfs-2.x.x-3.so For Samba version 3.x, the module should be symlinked into Samba VFS directory. Regarding Samba installation, the location of VFS directory may vary. Depending on your setup, usual locations might be: /usr/lib/samba/vfs or /usr/local/samba/lib/vfs. The symlink MUST have the name bdvfs3.so. To create it, use the following command, replacing the paths and version according to your configuration:

8

BitDefender for Samba Linux File Servers ln -sf /opt/BitDefender/lib/vfs/bdvfs-3.0.x.so \

/usr/lib/samba/vfs/bdvfs3.so The line added to /etc/samba/smb.conf should contain only the file name, without the so extension, such as: vfs object = bdvfs3 You may insert this line in the [share] sections you want to protect. Alternatively, you might protect all the shares by inserting the above line in the [global] section. Finally start smbd daemon (for example run smbd -D as root). Uninstall If you run the installation kit with the --uninstall parameter, the package will try to uninstall a previous version. Please note that the tar version actually wipes the installation directory, so make sure you backup any data you need. For example: sh ./BitDefender-samba-{version}.{os}.{architecture}.{package type}.run --uninstall

9


What is BitDefender for Samba Linux File Servers? BitDefender for Samba Linux File Servers is the solution that SOFTWIN recommends for the antivirus protection of the shared partitions on file servers running Linux. The product is designed and implemented in a modular manner, thus it can easily adapt to any work environment. Key features: Benefits: Content scanning The content of all shared partitions is scanned in order to

detect the malicious code they might contain. The infected files are treated depending on the administrator’s option by deletion, disinfection or isolation in the quarantine. BitDefender for Samba FileServer was tested by Virus Bulletin and found to be able to detect 100% of the viruses on the wildlist.

Intelligent Alerts Network Administrators can choose to receive alerts via email about events occurring in the network, such as virus detection, possible errors, etc.

Detailed Reports and Statistics

Enables filtering of all file traffic, generating automatic reports regarding: number of files scanned, disinfected, deleted, infected or filtered against active content.

On open / on close scan

BitDefender for Samba Linux File Server scans all shared files, on open and on close. This method ensures the safety of the file server when the user creates / opens a file, and after it has been modified.

Secures Infected or Suspect Files

Infected or suspect files can be isolated at user’s request in quarantine zones, preventing from the infection of the network. The quarantine zone can be analyzed at any time by the IT manager or it can be sent for analysis to the BitDefender Lab.

Customize scanning Only the files with the extensions specified by the user will be scanned. Also you can specify the maximum size of the files that will be scanned.

Remote administration

Enables remote configuration of file server protection, by simply installing the management console on one computer in the network or by web-based admonistration console.

Easy protection configuration

The antivirus protection can be configured under both Linux and Windows.

10

BitDefender for Samba Linux File Servers You can see below a general scheme of the way the product works:

The infected objects are treated depending on the administrator’s option, by disinfection, deletion or isolation in a certain location on the server, considered to be the quarantine zone.

11


Configuration under Linux The specification of the protection settings is made through the file bdsettings.xml, found to the location ”/opt/BitDefender/etc/bdsettings.xml”. Edit this file in order to specify the protection options. The file might be structured in the following sections: <NetProtect> <live> each one will be treated in a special paragraph: NetProtect Here the user can specify the action on the infected objects, the location of the quarantine zone, the events when a special situation appears. Inside this section there are some subsections, which contain a few tags where the user can modify the settings. Registry The Registry is a special process that BitDefender uses for keeping the settings and helps all other components communicate with each other. The /NetProtect/Registry/ section determines the way BitDefender Registry will accept incoming connections and what local users (defined on the Linux system) will be able to access the settings. The section should as below: <Registry> <TCPListen value="N"/> <Interfaces> <0.0.0.0 value=""/> </Interfaces> <LocalUsers> <bitdefender value=""/> <root value=""/> </LocalUsers> <RemoteUsers> <admin value="23F32CAC35432579"/> </RemoteUsers> </Registry>

The TCPListen variable controls whether bdregd will listen on a TCP port or only on a local UNIX socket. If you plan to use the Windows version of the BitDefender Remote Admin you must set this value to “Y” for the Console to be able to connect to bdregd.

12

BitDefender for Samba Linux File Servers If the above variable is enabled, then BitDefender will listen on port 8138 on the interfaces defined in the Interfaces section. If the setting is 0.0.0.0 then bdregd will listen on all interfaces. The LocalUsers section defines the local users (from the linux system) that are allowed to connect with the BitDefender Registry. By default the root and bitdefender user are set, but more users might be added for BitDefender to work properly. The RemoteUsers/admin variable defines the password (in an encrypted form) that will be used when connecting from the Windows version of the BitDefender Remote Admin. Since the password is in an encrypted form, if you want to change it you must run /opt/BitDefender/bin/bdsetup –pass . Core By editing the /NetProtect/Core section you can change a few aspects related to the bdcored process. Maybe the most important setting in this section is Threads – which determines the maximum number of threads bdcored will be allowed to initiate. If BitDefender receives a scanning request and bdcored is already scanning the <Threads> number of files, BitDefender will enqueue it and will begin to scan it just after a running thread finishes. If you think that your server is able to scan more files at the same time than the default value, you can increase the Threads number up to an appropriate value. The /NetProtect/Core/PushUpdate key controls whether the PushUpdate system is active or not. In case of any virus outbreaks or an emergency update we will send you a special email message that when scanned by BitDefender will automatically start the update process. These email messages can be discarded or delivered to their recipients depending on the /NetProtect/Core/PushUpdateAction (DROP | DELIVER). AV7 – The heart of BitDefender In the Plugins section you can modify the action on the infected files, the location of the quarantine zone and you can configure any other modules included with BitDefender. The settings for the AntiVirus core component are located in the /NetProtect/Plugins/AV7/ subsection. The following two variables controls how the antivirus will behave when a file is scanned: FirstAction – specifies the first action on the infected files (default DISINFECT) SecondAction – specifies the second action, in case the first action fails. The second action is enabled only when the first action is “DISINFECT”. (default DELETE)

13


The values that FirstAction and SecondAction can take are:

• IGNORE: the infected file found is ignored and delivered to the workstation that requested it.

• DISINFECT: attempts to disinfect, perform SecondAction if the object cannot be disinfected.

• DELETE: the infected file is deleted. • QUARANTINE: The infected file will be isolated in the quarantine area. • DROP: silently removes the file • REJECT: rejects access

The same settings can be configured in a easier way if you use the BitDefender Remote Admin module installed in Webmin (see the Web-based configuration chapter for more information). In the AV7 subsection the location of the quarantine directory (where the infected files are stored), QuarDir, can also be configured. By default if the installation directory is /opt/BitDefender/ the QuarDir will bet set to /opt/BitDefender/var/quarantine This is how the entire AV7 section should look: <Plugins> <AV7> <Path value="/opt/BitDefender/lib/npcore/av7core.plg"/> <Active value="Y"/> <FirstAction value="DISINFECT"/> <SecondAction value="IGNORE"/> <QuarDir value="/opt/BitDefender/var/quarantine"/> <Plugins value="/opt/BitDefender/lib/Plugins"/> <bdcore value="/opt/BitDefender/lib"/> </AV7> </Plugins>

14

BitDefender for Samba Linux File Servers Logging & e-mail notification The /NetProtect/Logger/ section is used to configure both the file logging module (Filelog) and the e-mail notification module (MNsmtp). BitDefender is able to write detailed information about the scanned objects to a file and to notify the administrator(s) when a virus is detected. The file logging job is done by the Filelog module and the most important ones are the Active and DefaultLogFile. The value of the Active variable (Y, or N) determines if any information is written to the DefaultLogFile (specified as full path) or not.. <Logger> <Plugins> <Filelog> <Path value="/opt/BitDefender/lib/logger/filelog.npl"/> <Active value="Y"/> <DefaultLogFile value="/opt/BitDefender/var/log/bd.log"/> </Filelog> <MNsmtp> <Path value="/opt/BitDefender/lib/logger/mn-smtp.npl"/> <Active value="Y"/> <Enable value="Y"/> <SMTPServer value="127.0.0.1:10025"/> <Administrator value="[email protected]"/> <AdminAlertPattern value="/opt/BitDefender/share/templates/en/AdminAlert.ptt"/> <FileServerAlertPattern value="/opt/BitDefender/share/templates/en/FileServerAlert.ptt"/> <KeyWillExpireAlertPattern value="/opt/BitDefender/share/templates/en/KeyWillExpireAlert.ptt"/> <KeyHasExpiredAlertPattern value="/opt/BitDefender/share/templates/en/KeyHasExpiredAlert.ptt"/> </MNsmtp> </Plugins> </Logger>

Every other section in the configuration file that contains a Verbose key increases the log verbosity of that specific component if set to “Y”. For example if you set the /live/Verbose key to “Y” the log file will contain detailed information about the update attempts made by the bdlived process. The same settings can be easily modified via the BitDefender Remote Admin:

15


16

The Mail Notification section (MNsmtp) controls how and where the notification will be sent. The following variables change the MNsmtp’s behaviour: Active * Enable bdlogd to load this plugin. If not loaded, all other settings are useless. * Values: {"Y", "N"} * Default value: "Y" Enable * Enable logging (if the plugin is loaded (Active=Y) you can enable/disable mn-smtp without restarting bdlogd) * Values: {"Y", "N"} * Default value: "Y" SMTPServer * The IP of the server used for sending the alerts (in IPv4 numeric format) * You can also specify a port number by prepending the number with a colon. The default value of 25 is assigned if the port is not specified, the format is not correct (missing colon), or if an invalid invalid port number is specified (not in 1..65535) or if a conversion error occurs. * Default value: "127.0.0.1:25"

BitDefender for Samba Linux File Servers From * Specify the sender used when sending alerts. This value will appear in the “From: field of the notification e-mails). * Values : email address * Default value : bitdefender@<hostname> Administrator * The email address where to send key_expired alerts, key_will_expire alerts and other important error alerts. * Values : email address(es) KeyWillExpireAlertPattern * Full path to a file that will be used as pattern in key_will_expire alerts send to administrator * Values : file path * Default value : <path to mn-smtp.npl>/../../share/templates/en/KeyWillExpireAlert.ptt KeyHasExpiredAlertPattern * Full path to a file that will be used as pattern in key_expired alerts send to administrator * Values : file path * Default value : <path to mn-smtp.npl>/../../share/templates/en/KeyHasExpiredAlert.ptt In the templates used for notifications the following variables (case insensitive) can be used: The BitDefender variable must be present on every template or the default template will be used instead. • FileServerAlert.ptt

o Filename o Action o Virus o Status o Agent

• KeyWillExpireAlert.ptt o Product o Days o Agent

• KeyHasExpiredAlert.ptt o Product o Agent

The same settings can be easily modified via the BitDefender Remote Admin:

17


18


19

BitDefender for Samba Linux File Servers Real Time Virus Report (RTVR) RTVR is a system included in BitDefender products deployed all over the Internet that reports virus activity to the BitDefender Labs to help isolate and prevent the spreading of malware in an efficient and timely manner. Reporting details Viruses are reported every 4 hours (or the value of /NetProtect/Logger/Plugins/RTVR/Hours) or when the queue of viruses to report has reached a number of 1000 entries (or the value of /NetProtect/Logger/Plugins/RTVR/Viruses) The time intervals are checked only when a new log event appears. That means that if there are some virus log events in the queue, and the next one arrives days later, only then the queue will be reported to the server, even though the time interval is set to 4 hours. Sample Registry Tree <RTVR > <CUID value="273b1836-8118-4755-bfc9-af775de02e49" /> <Path value="/opt/BitDefender/lib/logger/rtvr.npl" /> <Active value="Y" /> <Enable value="Y" /> <UID value="022d182e-1157-4d9b-8b7a-d74acb6ded0e" /> <Hours value="4" /> <Viruses value="3" /> <Timeout value="15" /> <ReportHost value="report.bitdefender.com" /> <Country value="3" /> </RTVR>

20

BitDefender for Samba Linux File Servers Agents The Samba agent that is used for BitDefender integration with Samba File Servers has all of its configuration entries grouped under /NetProtect/Agents/SAMBA/ <Agents> <SAMBA> <CRC value="1113568872"/> <Key value="02C17A09336CA9F103F6"/> <MaxFileSize value="0"/> <Extensions value=""> <* value=""/> </Extensions> <Id value="8"/> <FailureAction value="REJECT"/> </SAMBA> </Agents> MaxFileSize – the maximum size (in KB) of the files that are to be scanned. If the value is 0, all the files, regardless of their size, will be scanned.

Extensions value – the extensions that will be scanned. By default BitDefender will scan all files, no matter of their extension. FailureAction (string, value: one of these words: DROP, REJECT, REFUSE, FORWARD). Action that should be taken when the scan process fails. Possible reasons for the failure include: bdcored not running, crash while scanning. The default value is REJECT. The Settings can be configured using BitDefender Remote Admin.

21


22


23

BitDefender for Samba Linux File Servers Live In this section you may find the settings for BitDefender update. <live> <CheckSecs value=”28880” /> <mainlocation value=http://upgrade.bitdefender.com /> <ProxyOn value=”Y”> <ProxySetts value=”192.168.5.99:8080” /> </live> Variable Description CheckSecs specifies the interval to which the upgrade checking is made

(in seconds) Mainlocation specifies the location of the upgrade server ProxyOn specifies if the product upgrade is made or not through a

proxy server. If the upgrade is made through a proxy, the variable gets the value Y, otherwise it gets the N value.

ProxySetts specifies the proxy settings, in case the company uses a proxy server.

The proxy settings must be specified in the following manner: <ProxySetts value=”proxy_server:port” /> or <ProxySetts value=”user_name:password@proxy_server:port”/> for the proxy servers with authentication. Automatic update BitDefender for Samba is pre-configured to update automatically each 8 hours. Update interval To modify the update time interval you will have to run the command bellow:

# /opt/BitDefender/bin/bdsetup –setkey /live/CheckSecs 28800

Note: The time interval is displayed in seconds. Proxy server configuration

If you use a proxy server to connect to the internet please run the following command and follow the on-screen instructions. # /opt/BitDefender/bin/bdsetup –proxy

In order to deactivate the proxy usage, run # /opt/BitDefender/bin/bdsetup –noproxy.

24

BitDefender for Samba Linux File Servers The settings for the Live! Update module can be easily configured via the BitDefender Remote Admin:

An automatic update can be forced by running /opt/BitDefender/bin/bd update from a linux console or clicking the Update Now button from the BitDefender Remote Admin:

25


26

Manual update The cumulative.zip is released every week on Monday and it includes all the virus definitions and scan engines updates up to the release date. The daily.zip is released each day and it includes all the virus definitions and scan engines updates since the last cumulative and up to the current date. In order to update the product manually, please follow these steps: 1. Download the updates

If it's Monday or if it's the first time you update using the manual updates please download the cumulative.zip and save it on your disk when prompted. Otherwise please download the daily.zip and save it on your disk.

2. Extract

Extract the contents of the zip file to “/opt/BitDefender/lib/Plugins/ “ (overwrite the existing files if necessary). Note: If you are using both cumulative.zip and daily.zip you will have to extract the contents of the cumulative.zip first.

http://www.bitdefender.com/bd/site/downloads.php?menu_id=19&s_id=2

BitDefender for Samba Linux File Servers WARNING: After extracting the zip archives, you MUST set the proper owner and permissions, by running the following commands: # chown bitdefender:bitdefender \

/opt/BitDefender/lib/Plugins/* # chmod 644 / opt/BitDefender/lib/Plugins/*

3. Restart BitDefender services

Use the "/opt/BitDefender/bin/bdsetup -restart" command Patches Since the Live module described above automatically updates only the virus definitions and some of the core libraries used by BitDefender, we put up a small utility that can be used to update the whole BitDefender installation. BitDefender Swiss Army kniFE (bdsafe) is a multipurpose tool used for keeping BitDefender up to date by applying various patches that might appear after the product is released. BitDefender Swiss Army kniFE (bdsafe) can be ran directly by the system administrator to list/search/install/uninstall patches or it can installed as a cron job to automatically install the patches as soon as they are released. Patches are released to correct any bugs found or to add new features and they are grouped in the following categories: CRITICAL, SECURITY, NORMAL. Patches are labeled CRITICAL when they affect the normal behaviour of the product. For example if a new kernel is released that prevents bdcored to accomplish its job then a CRITICAL patch will be released that will correct this issue. A patch is labeled SECURITY when it corrects any security related issue. For example if a bug is found that might permit an attacker to gain access to emails scanned by BitDefender then a SECURITY patch will be released to fix this issue. Opposed to CRITICAL patches that affect the BitDefender's normal behaviour, SECURITY patches fix bugs that will not normally occur in friendly environment (if such one exists). Patches labeled NORMAL are usually released to fix minor (cosmetic) bugs or to add new features. For example if we found that BitDefender incorrectly formats an email header a NORMAL patch will be released to fix this minor issue. Please see the bdsafe(1) manpage for more information about BitDefender Swiss Army kniFE .

27

BitDefender for Samba Linux File Servers Product registration The product is delivered with a trial registration key valid for thirty days. At the end of the trial period, if you want to purchase the product you have to provide a new serial number. In order to modify the default serial number use the: “/opt/BitDefender/bin/bd register” command (alternatively you can use /etc/init.d/bd register" or "service bd register") and follow the on-screen instructions. You can register BitDefender from the BitDefender Remote Admin by clicking the Register button from the About / BitDefender Module Info section:

28

BitDefender for Samba Linux File Servers More info about BitDefender status More information about the current status of BitDefender is available if you run “/opt/BitDefender/bin/bd info”: BitDefender v1.6.2 on Linux localhost 2.6.11-p4HT #1 SMP Wed Mar 23 19:06:33 EET 2005 i686 unknown unknown GNU/Linux BitDefender components: - core: 1.6.2-3 - engines: 1.6.2-2 - samba: 1.6.2-1 Engine: BitDefender AV Engine Ver 7. Signatures: 124450 - first action: REJECT - second action: REJECT - quarantine directory: /opt/BitDefender/var/quarantine (0 files) Agents: - SAMBA - Valid license, 29 days remaining. AntiSpam: Enabled Virus signatures update status: - last checked: unknown - last updated: never - check every: 8 hours

The following information is displayed: - the current version of BitDefender for File servers along with some system information - the version numbers of BitDefender components - the AV engine used and its configured actions - the agents installed along with the license status - the time when BitDefender last checked for virus signatures update and the time when

it actually updated its signatures You must have bdregd running in order to see all this information, otherwise only a small part of it will be shown. By running bd stats you will receive statistics about BitDefender’s activity: +-------------------------+-------------------------+ | FILES | OBJECTS | +-------------------------+-------------------------+ | Scanned: 1344| Scanned: 1480| | Infected: 1123| Infected: 1129| | Suspected: 0| Suspected: 0| | Disinfected: 438| Disinfected: 444| | Deleted: 685| Deleted: 711| | Quarantined 68| Ignored: 0| | Denied: 0| | | | | +-------------------------+-------------------------+

29

BitDefender for Samba Linux File Servers If you want to reset the statistics run the command /opt/BitDefender/bin/bdsetup –resetstats . Statistics are available from the BitDefender Remote Admin as well:

30


Web-based configuration BitDefender for Samba can also be configured using a web browser under any operating system. In order to configure the antivirus protection for Linux, it is necessary to install on the server side the Webmin module. Before installing, you have to make sure that the computer meets the following requirements: Operating system: Linux Installed product: BitDefender for Samba File Servers v1.6.2. Webmin: v1.100 or later The webmin module installation In order to use the BitDefender webmin module you must first install Webmin from http://www.webmin.com. Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms (and Java for the File Manager module), you can setup user accounts, Apache, DNS, file sharing and so on. After you succesfully installed Webmin you must:

- open the panel into a browser (http://hostname:10000/) - go to Webmin / Webmin Configuration / Webmin Modules - select the From ftp or http URL radio button - enter the following value in the textbox

ftp://ftp.bitdefender.com/pub/linux/RemoteAdmin/webmin/BitDefender.wbm.gz - Press Install Module

31

http://www.webmin.com/

http://hostname:10000/

ftp://ftp.bitdefender.com/pub/linux/RemoteAdmin/webmin/BitDefender.wbm.gz


Uninstalling the BitDefender webmin module To uninstall the BitDefender Webmin module, follow these steps:

- open the webmin panel in a web browser (http://hostname:10000/) - Go to Webmin / Webmin Configuration / Webmin modules - Select BitDefender Remote Admin from the Delete Modules list and press Delete

Selected Modules. Accessing the BitDefender webmin module The BitDefender webmin module can be accessed from any web browser that supports tables and forms by going to http://hostname:10000/. After you log into Webmin you can find BitDefender Remote Admin under the System section.

After choosing BitDefender Remote Admin from the System section the following panel appears:

32




33

The left side menu (configuration toolbar) has the following options: BitDefender status – the current status of BitDefender's services is shown along with

the commands to start, stop, restart Samba – configure the Samba integration Antivirus – to select the action, in case an infected file is detected, and the location of

the quarantine area; Mail Notification – to select the e-mail addresses where alarm messages will be sent

in case of virus detection; Logger – to configure the logging process Quarantine – to see the quarantine objects Live! Update – to access the configuration window for the product update; Statistics – to view the reports and statistics about the scanned objects; Registry – to change the settings related to BitDefender Registry; About – to view information about the current version, copyright, and contact

information as well;


Configuration under Windows BitDefender for Samba Linux File Servers can also be configured from Windows. In order to configure the antivirus protection for Linux from Windows, it is necessary to install the Management Console first. Before installing, you have to make sure that the computer meets the following system requirements: Operating system: Windows NT, Windows 2000, XP Recommended processor: Pentium II 300 MHz Recommended memory: 64 MB Minimum disk space: 20 MB The Management Console installation In order to install the product, it is absolutely necessary to log on the computer with administrative rights. Step 1: Insert the CD into the CD-ROM unit and double-click on the file “BitDefenderRemoteAdmin.exe”. This will launch the setup wizard, which will guide you through the setup process. The following window will appear:

Press Cancel if you want to abandon the setup process. Press Next in order to continue.

34

BitDefender for Samba Linux File Servers Step 2: In this window you can read the License Agreement.

If you do not agree with this terms press No. The installation process will be abandoned and you will exit setup. Click Yes if you understand and agree with these terms, and you will pass to the installation process. Step 3: In the end a window will confirm you the installation of the program on your computer.

35

BitDefender for Samba Linux File Servers Uninstalling, repairing or modifying BitDefender Management Console

If you want to modify, repair or uninstall the initial installation of BitDefender Management Console, from the Windows menu select Start → Programs → BitDefender Remote Admin → Modify & Repair & Uninstall. The following window will appear. You have to select one of these three options:

Modify – Select new program components to add or select currently installed components to remove. Repair – Re-install all program components installed by the previous setup. Remove – Remove all installed components.

To continue setup, select one of the three options listed above. We recommend Remove for a clean installation.

36


Accessing the Management Console The Management Console can be launched from the Windows Start menu, following the path Start → Programs → BitDefender Remote Admin → Remote console. In order to be functional, the Management Console must connect to the server, that is the computer where BitDefender is installed, because it uses the scan engines installed on that computer. When you access the Management Console, a small window appears prompting you to type in the IP of the computer where BitDefender is installed.

Type in the IP of the computer and the password and click Ok. After connecting to that computer, the Management Console becomes active. It will read the configuration information from the server and any modification made will be transferred towards it. When the Management Console opens, one can view the configuration bar and the Option button on the left.

37

BitDefender for Samba Linux File Servers The left side menu (configuration toolbar) has the following options: About – to view information about the current version, copyright, and contact

information as well; BitDefender Update - to access the configuration window for the product update; BitDefender Engine - to select the action, in case an infected file is detected, and the

location of the quarantine area; Mail Notification – to select the e-mail addresses where alarm messages will be sent

in case of virus detection; Statistics – to view the reports and statistics about the scanned objects; Register – to register the product.

Options button will have as effect the opening of a menu with the following options:

Connect to a remote computer – for introducing the IP for the computer you want to connect to. A window requesting the IP and the password will appear. Change administrative password – will open a window where you can specify the password. Type the password in the field Password and confirm it in the field Confirm. Note: You must set a password before you can connect to a remote computer.

38


Selecting the action on infected messages In order to select the action on infected messages, click on the BitDefender Engine option from the Management Console. Select the action on infected messages BitDefender for Samba Linux File Servers allows the selection of one of the following actions on infected messages: First action Second action Description Ignore

The result is that the infections found are ignored and the file is delivered to the workstation that requested it.

Ignore

In case the disinfection of the file fails, it is delivered towards the workstations without any change and still containing the infection.

Delete

If the disinfection fails, the file will be deleted.

Disinfect

Move to quarantine

In case of disinfection failure, the infected file is isolated in the quarantine area.

Delete

The infected file will be deleted.

Move to quarantine

The infected file will be isolated in the quarantine area.

Click to selectthe first action

Observations: 1. The section Second action, where one can select the second action for the infecsupplementary measure of protection and it is activated only in case the disinfection oselected. 2. In order to prevent a possible infection in the network, we recommend you to seaction Disinfect and the second action Move to quarantine or Delete. Select Move toin case the files may contain important information and you wish to request lateranalysis of the infected files. 3. In case the action is Ignore all the files will be delivered to the workstations without viral code.

39

Select the second action

ted files, is a f the file was

lect the first quarantine

an antivirus

removing the

BitDefender for Samba Linux File Servers Select the location for the quarantine area In case the isolation of the infected files in the quarantine area was selected, the complete path to the quarantine folder must be specified.

Note: The quarantine folder must be previously created and must be located on the mail server. The complete path must be specified. For example: /opt/BitDefender/var/quarantine. At the end, click on Apply in order to save the changes.

40


Sending alarm messages in case of infection

If an infection is found, there is the possibility of sending alarm messages by email. There are three types of events that can generate alarm messages: Variable Description Warning

Generates a warning message in case a special situation, such as disabling the BitDefender protection, appears.

Error

Generates a message that announces the apparition of a disfunctionality within BitDefender. Such situations may appear, for example, because of the accidental deletion of some files or failure to load the scan engines.

Virus A message is generated in case an infected or suspicious message is detected.

Click Mail Notifications option from the Management Console. For sending alerts via e-mail you must first specify some information in the section SMTP Settings:

- SMTP Server – type in the name of the SMTP server that the company uses to send messages.

- From – type in the e-mail address that will appear in the sender field. Note: It is necessary to type in a valid e-mail address for the SMTP server, otherwise the server may decline sending an e-mail whose sender (e-mail address) is unknown to him. In order to make the Mail Notification service active, you must click on Enable Mail Notification.

Click here to enable the service

Click here to select the event

41

Type in the sender’s e-mail address

Click here to modifythe selected event

BitDefender for Samba Linux File Servers The section contains the buttons:

Add – to add a new user who will receive an e-mail in case a situation out of the ordinary appears; Modify – to modify the recipient that will be warned or the event that causes the

warning; Remove – to delete a warning event previously created.

If you wish to create an event that generates warnings via e-mail, click Add. In the window that appears select the event's type, by simply clicking it and type in the e-mail address(es) where it will be delivered.

Click here to select the event

Press Ok to save the event or Cancel to abandon. For example, I want to generate alarm messages when a virus is found. I selected, in the Event section, Virus and introduced in the Send alert to field the e-mail address [email protected]. An e-mail will be sent to this address whenever BitDefender finds a virus. At one moment, an infected message was found. To [email protected] arrived an e-mail with the following content: BitDefender found an infected object Object: object Virus: Klez.Y Thank you for choosing BitDefender The BitDefender Lab www.bitdefender.com) All the warning e-mails in case of infection will have the subject BitDefender found an infected object and will contain the name of the identified virus. Note: If you want to send messages to more than just one mail recipient, these addresses must be separated by comma. When you want to change an event (the mail recipient or the event type), press Modify. Select a new type of event, or specify a new e-mail address. Click Ok if you want to save the changes or Cancel if you want to keep the previous settings. Note: To modify or delete an event it is necessary to click the field Event corresponding to that event and then press one of the buttons Modify or Remove. If you press the Remove button, the event will be removed without further warning. At the end, click on Apply in order to save the changes.

42

http://www.bitdefender.com/


Updating the product BitDefender for Samba Linux File Servers was designed with a function for automatic update of the virus definitions. At the present time, the risk of getting infected increases, both because new viruses appear and the existing ones keep on spreading. The e-mail communication, which is more and more used, has become a final factor in spreading the infection from one user to another. For example, the case of infection with mass mailers is well known. These viruses arrive by e-mail and replicate themselves by sending a copy to all the addresses from Address Book, spreading the infection without the user’s knowledge. Every 8 hours the update function is launched. It connects to the BitDefender upgrade server and in case new virus definitions are found, the update will be made transparently, without the administrator’s intervention, by downloading the files with the virus definitions. You can view the date and time the last check and update were made, by clicking the option BitDefender Update on the configuration bar. You will enter a section similar to the following:

43


The section contains 3 subsections:

• The subsection General information, containing the date and time of the last check and update.

• The subsection Update preferences that allows changing the update checking

interval, as well as the update location. By default this is 8 hours. If you want to change it, type a new interval in the Check interval field. If you want to change the location for the upgrade, type a new one in the Update location field.

In this subsection, you will find the options for the product update configuration in case the company uses a proxy server with authentication. In this case, check the option Use proxy. The following options will be activated:

Server – type in the IP of the proxy server; Port – type in the port the server uses to connect to the proxy server; User – type in a user name recognized by the proxy; Password – type in the valid password for the previously specified user;

See the example below:

• Status information shows the status of the update process.

Press the button Update now! if you wish to launch the update immediately. The application will contact the upgrade server and will update the definitions if any update is found. At the end, click on Apply in order to save the changes.

44


Viewing the reports and the statistics BitDefender for Samba Linux File Servers automatically generates detailed reports and statistics. You have the possibility to view these reports by selecting the option Statistics from the configuration bar. These reports contain the following information:

- the number of scanned objects; - the number of infected objects; - the number of disinfected objects; - the number of deleted objects;

Note: By objects we mean the number of e-mail messages and not the number of attached files.

45


Product registration In order to ensure a proper functioning of the product and the scanning of the files, you must first register. In order to do this, click the option Register from the configuration toolbar.

The window offers information about the status of the product (registered or not) and the expiration date.

There are few steps to follow in order to register the product:

1. Click on the Register option from the Management Console; 2. Select the product from the module section; 3. Type in the serial number in the selected area; 4. Press the Change Registration button; 5. Click on the Apply button.

If the number is valid, then the status of the product changes to registered and the expiration date appears.

46


Frequently Asked Questions Installation Q: What are the system requirements for running BitDefender for Samba Linux File Servers? A: You will find them in the System requirements section. Q: Which version of BitDefender for Samba Linux File Servers do I need? A: This depends on what gcc compiler libraries your distribution uses. We provide two sets of binaries: - one set which uses gcc-2.9x libstdc++ libraries - one set which uses gcc-3.2x libstdc++ libraries Q: Why are there .rpm, .deb and .tar packages? A: We created .tar packages for systems where the rpm or dpkg package manager is not available (Slackware, Gentoo, LFS). Q: How can I check if the installation kit is not corrupted? A: You need to run the command: sh ./BitDefender-samba-{version}.{os}.{architecture}.{package type}.run --check The answer should be: Verifying archive integrity... MD5 checksums are OK. All good. If you get a different answer, please re-download the installation kit. Q: How do I compile the .tar package? A: The .tar package we provide are not source code - BitDefender is closed source software. They contain binaries, so there's no need to recompile, just unpack and install. Q: How do I install the package? A: Follow the instructions from the Install section. Configuration Q: Does BitDefender alter my server configuration? A: BitDefender will register as a filter. Q: I modify the bdsettings.xml, but when I shut down BitDefender, the modifications are lost! Why? A: Restarting the settings should not affect the file, but this can happen because sometimes Live module updates some values. In this case, you need to shut down BitDefender services before editing bdsettings.xml: - run "/opt/BitDefender/bin/bd stop" - edit ”bdsettings.xml” - run "/opt/BitDefender/bin/bd start" Q: Where do I enter my serial number (license key) ? A: The product registration cand be made under both Linux and Windows.

47

BitDefender for Samba Linux File Servers Use / Troubleshooting Q: All BitDefender daemons are running as an unprivileged user, except bdcored. Why ? A: Due to Samba internal architecture, bdcored must run as root, to be able to clean infected files from all the exported Samba shares protected by BitDefender. Q: BitDefender does not catch viruses! A: Make sure that: - the product is installed and configured properly. - the product is not expired - the 30 evaluation days passed or the registration key you

used is expired or incorrect. Q: I don't receive any warning, but the antivirus works. Why? A: On some systems, you need a valid email address for the sender. The default is root@localhost - this is not valid in all cases. Please change it to a "regular" email address, for example [email protected]. Updates Q: How can I update the virus signatures database? A: By default, BitDefender will automatically update every 8 hours. But you can also update manually from Linux or Windows. Q: How can I tell if the virus signatures database is up to date? A: Run "/opt/BitDefender/lib/bdc --info" and check the number of signatures

.matched with the one here

48


Contact information

SUPPORT DEPARTMENT:

As a valued provider, SOFTWIN strives to provide its customers with an unparallel level of fast and accurate support. The Support Center listed below is continually being updated with the newest virus descriptions and answers to common questions, so that you obtain the necessary information in a timely manner. At SOFTWIN, dedication to saving its customers time and money by providing the most advanced products at the fairest prices has always been a top priority. Moreover, we think that a successful business is based on a good communication and a commitment to excellence in customer support. Clients department: [email protected] Technical support: [email protected] Phone: 0040-21-233 07 80 Address: SOFTWIN 5th Fabrica de Glucoza St. PO BOX 52-93 Bucharest, ROMANIA

49

mailto:[email protected]

mailto:[email protected]

Documents

BitDefender for Sambadownload.bitdefender.com/resources/files/Download/uk/BitDefender … · BitDefender for Samba Linux File Servers Install Before you begin the installation process,