5kits zhao

anti-gumblar

Installation

step 1 ) nano /etc/pure-ftpd.conf

Edit /etc/pure-ftpd.conf and set

CallUploadScript yes

step 2 ) nano /etc/init.d/pure-ftpd

Edit /etc/init.d/pure-ftpd

Look for $DAEMONIZE $fullpath /etc/pure-ftpd.conf -O clf:/var/log/xferlog $OPTIONS –daemonize

Under this add

$DAEMONIZE /usr/sbin/pure-uploadscript -B -r /root/ftp_clamscan.php

Next look for kill $(cat /var/run/pure-ftpd.pid)

Under this add

kill $(cat /var/run/pure-ftpd/pure-uploadscript.pid)

step 3 ) download file ( anti_gumblar.tar.gz )

wget http://www.oxio.net/anti_gumblar/anti_gumblar.tar.gz

step 4 ) extract tar file to /root directory

tar -zxvf anti_gumblar.tar.gz

step 5 ) give execution right to ftp_clamscan.php

chmod +x ftp_clamscan.php

or

chmod +x /root/ftp_clamscan.php

step 6 ) open ftp_clamscan_config.php file and edit needed lines.

nano /root/ftp_clamscan_config.php

step 7 ) create directory for quarantine files

mkdir /quarantine

mkdir /quarantine/clamav

References

http://anti-gumblar.oxio.net/installation/

The script will help to prevent Dark Mailer being uploaded into the server.

Thank you.

Leave a Reply