anti-gumblar
Installation
step 1 ) nano /etc/pure-ftpd.conf
Edit /etc/pure-ftpd.conf and set
CallUploadScript yes
step 2 ) nano /etc/init.d/pure-ftpd
Edit /etc/init.d/pure-ftpd
Look for $DAEMONIZE $fullpath /etc/pure-ftpd.conf -O clf:/var/log/xferlog $OPTIONS –daemonize
Under this add
$DAEMONIZE /usr/sbin/pure-uploadscript -B -r /root/ftp_clamscan.php
Next look for kill $(cat /var/run/pure-ftpd.pid)
Under this add
kill $(cat /var/run/pure-ftpd/pure-uploadscript.pid)
step 3 ) download file ( anti_gumblar.tar.gz )
wget http://www.oxio.net/anti_gumblar/anti_gumblar.tar.gz
step 4 ) extract tar file to /root directory
tar -zxvf anti_gumblar.tar.gz
step 5 ) give execution right to ftp_clamscan.php
chmod +x ftp_clamscan.php
or
chmod +x /root/ftp_clamscan.php
step 6 ) open ftp_clamscan_config.php file and edit needed lines.
nano /root/ftp_clamscan_config.php
step 7 ) create directory for quarantine files
mkdir /quarantine
mkdir /quarantine/clamav
References
http://anti-gumblar.oxio.net/installation/
The script will help to prevent Dark Mailer being uploaded into the server.
Thank you.