The LISTSERV® / F-Secure® FAQ

Last updated 20 Apr 2017

LISTSERV has for many years and versions included an Anti-Virus Scanning feature for messages passing through the server.  This is a value-added enhancement which requires a special LAK and  F-Secure Anti-Virus.  At this writing the feature is only available for Windows 2008/2012/2016 (including R2) and Linux (RHEL/CentOS 6 and later, and similar distributions) running LISTSERV Classic or LISTSERV Classic HPO. 

(Other OS platforms are supported through the LISTSERV AVS. There is no intent to make this functionality available in the Lite version of the product.)

Versions of F-Secure's Server Security and Linux Security previous to the current supported versions found on F-Secure's download site are obsolete and should not be used with LISTSERV.

We have removed all FAQ questions relevant to earlier versions from this version of the FAQ.

 

L-Soft's regular support addresses are reserved for LISTSERV maintainers' use only. List owners should use alternate avenues (some listed below), and may not write directly to L-Soft for help.

NOTE:  The links to F-Secure's website in this document were correct as of the last update of this document.  L-Soft does not control F-Secure's website and cannot be responsible for outdated links to it.  We will be happy to update this document with corrected links if broken links are reported.  Thank you!

L-Soft's F-Secure install documentation

L-Soft's FTP site (currently-certified FSAV versions available here)

F-Secure Web Site

Downloads and Hotfixes for F-Secure Server Security Standard

Downloads and Hotfixes for F-Secure Linux Security

Here we have tried to compile a list of the most frequently-asked questions that LISTSERV maintainers ask about F-Secure AntiVirus (FSAV) products.

 

1.         Which F-Secure Anti-Virus products are supported?. 2

2.         What are the recommended FSAV settings for use with LISTSERV?. 3

3.         How can I tell if LISTSERV is actually using FSAV to scan for viruses?. 3

4.         Why does the FSAV icon sometimes not show up in LISTSERV’s web interface?. 4

5.         I see there is a more recent version of my F-Secure product available.  Can I install it?. 4

6.         We already have [insert name of AV product].  Can we use it with LISTSERV instead of FSAV?. 5

7.         Do I need ANTI_VIRUS=1  in my site.cfg  or  go.user  for FSAV to be enabled?. 5

8.         If I want to disable LISTSERV from using FSAV, how do I do that?. 5

9.         Why do I get a notification from LISTSERV that the FSAV database hasn’t been updated  in xx days?  6

10.      Can I disable these virus database notifications?. 6

11.      What are the requirements to have F-Secure run on my LISTSERV installation?. 6

12.      Why should I upgrade to the latest current version?. 7

13.      [Linux] F-Secure dbupdate utility no longer downloads virus signature updates. 8

14.      [Windows Workstation OS] Why is there not a supported version of FSAV for Windows Workstation operating systems?. 8

 

1.  Which F-Secure Anti-Virus products are supported?

With your paid maintenance, you will receive the following:

DOCUMENTED RESTRICTION: Unfortunately, F-Secure no longer provides a standalone kit for FSAV for Windows Workstation (or for the replacement product F-Secure Client Security). This makes it impossible for L-Soft to provide FSAV kits for Windows Workstation class operating systems (7, 8.x, 10, and so forth).  Please see below for a discussion of alternatives.

 

Other F-Secure Anti-Virus products, purchased separately directly from F-Secure, may work with LISTSERV as well, but are not certified by L-Soft, and there are no guarantees of interoperability.


2.  What are the recommended FSAV settings for use with LISTSERV?

Please refer to L-Soft's "Installing F-Secure Anti-Virus" guide for this information.


3.  How can I tell if LISTSERV is actually using FSAV to scan for viruses?

Issue a "SHOW VERSION" command to LISTSERV.  The response should  include a line like the following:

For Windows:

Virus database version:      2017-03-23 09:20:13 (F-Secure Anti-Virus 9.52)

For Linux:

Virus database version:      2017-03-23_12 (F-Secure Anti-Virus 11.10)

Under Windows, the version number shown may cause confusion.  The version number "9.52" is correct; F-Secure Server Security 12.x (in this case, 12.11) reports the version of F-Secure Anti-Virus that is packaged into the Server Security suite.  You can confirm that you are running Server Security 12.x by right-clicking the F-Secure shield icon in the system tray and choosing "About . . . ", which shows among other things

F-Secure Server Security 12.11 build 103
F-Secure Anti-Virus 9.52 build 239


4.  Why does the FSAV icon sometimes not show up in LISTSERV’s web interface?

When LISTSERV starts it sends the command "fsav /version" (Windows) or "fsav --version" (Linux) to FSAV.  If there is a problem with the response, LISTSERV's AV scan feature will be disabled.

You must also have current paid maintenance for the AV scan feature to work. This means that for sites with perpetual (non-expiring) Product LAKs, an additional Maintenance LAK must be installed.  (For sites with non-perpetual Product LAKs, your maintenance expires at the same time as your Product LAK.)  To check your maintenance status, issue a  SHOW LICENSE  command to LISTSERV. There should be a line in the response that looks like this:

            Maintenance until: 26 Nov 2017, serial number MNT-EXAMPLE-1

If the SHOW LICENSE output says

            Maintenance until: No maintenance information

either your maintenance has expired or you have not received or applied your maintenance LAK.  If you need a new maintenance LAK, please contact your L-Soft sales representative.  (The support department cannot issue LAKs.)

If maintenance is current, try another stop/start of LISTSERV.


5.  I see there is a more recent version of my F-Secure product available.  Can I install it?

Check with support@lsoft.com  before doing so to make sure that it has been tested for use with LISTSERV. Please note that you will need a different F-Secure Anti-Virus license key from your Sales Representative before installing the latest version.

As of the date of this FAQ:

F-Secure Server Security Standard 12.11 is certified for use with LISTSERV 16.0-2014b or later for Windows Servers.*  If you are running an earlier version and wish to upgrade, contact your sales representative for an F-Secure Server Security Standard 12.11 key.

DOCUMENTED RESTRICTION: Unfortunately, F-Secure no longer provides a standalone kit for FSAV for Windows Workstation (or for the replacement product F-Secure Client Security). This makes it impossible for L-Soft to provide FSAV kits for Windows Workstation class operating systems (7, 8.x, 10, and so forth).  Please see below for a discussion of alternatives.

 

F-Secure Linux Security (FSLS) 11.10 running as a command-line-only installation is certified for use with LISTSERV 16.0-2014b or later for Linux.*  If you are running an earlier version and wish to upgrade, contact your sales representative for an FSLS 11.10 key.  (The "full server" version of FSLS 11.10 is NOT supported for use with LISTSERV.)

Versions of F-Secure's Server Security and Linux Security previous to the current supported versions found on F-Secure's download site are obsolete and should not be used with LISTSERV.

We have removed all FAQ questions relevant to earlier versions from this version of the FAQ.

 

* We recommend upgrading LISTSERV to at least version 16.0-2017a because of an incompatibility introduced between LISTSERV and the 10.x and later versions of the F-Secure products.  The incompatibility may result in occasional spurious reports from LISTSERV of out-of-date anti-virus signatures. This incompatibility is fixed in LISTSERV version 16.0-2017a. To ensure that you have at least LISTSERV version 16.0-2017a, issue a SHOW LICENSE to your LISTSERV server.  The build date reported should be 28 Feb 2017 or later.  It should be noted that there are other important reasons to upgrade to LISTSERV 16.0-2017a – please see the release notes for more information.

See below for more information on these updates.


6.  We already have [insert name of AV product].  Can we use it with LISTSERV instead of FSAV?

Yes, to a limited extent, under Windows only.  Please see the LISTSERV manuals for information on the FOREIGN_ANTI_VIRUS site configuration parameter and its use.


7.  Do I need ANTI_VIRUS=1  in my site.cfg  or  go.user  for FSAV to be enabled?

No, this is the default if you are running Classic or Classic HPO with current maintenance. LISTSERV checks for FSAV running on the server when it starts.


8.  If I want to disable LISTSERV from using FSAV, how do I do that?

For Windows:  Add

     ANTI_VIRUS=0

to your site.cfg file and restart LISTSERV.

For Linux: Add

      ANTI_VIRUS=0
      export ANTI_VIRUS

to your go.user file and restart LISTSERV. 

(Note: If this variable has been previously set via the web administration interface, you will need to set it there rather than in go.user.)


9.  Why do I get a notification from LISTSERV that the FSAV database hasn’t been updated  in xx days?

LISTSERV only checks the time stamp of the database files. It does not check  the last time it was checked by the F-Secure Auto-Update Agent. In rare cases, F-Secure may not have a virus signature update for 5 days or longer, so when the database file is determined to be five days old, LISTSERV begins notifying the  non-quiet postmaster(s) to alert them to a possible problem.

In this case you should do the following:

Windows:  Check F-Secure's Automatic Update Agent to make sure that it is running. If it is, and if "fsav /version" reports that the signatures are up to date, then the warning can be ignored.

Linux:  Check to make sure that the F-Secure Automatic Update Agent (fsaua) is running.  This can be done with `service fsaua status` under Red Hat-like distributions.  If it is, and if "fsav --version" reports that the signatures are up to date, then the warning can be ignored.


10.     Can I disable these virus database notifications?

Yes, with the LICENSE_WARNING= site configuration variable (please see here for details). Please be aware this also turns off most LISTSERV license warnings, including warnings that inform you that your maintenance is about to expire, or that your product LAK is about to expire.  It is L-Soft's strong recommendation that license warnings not be disabled under any circumstances, and then only with the understanding that you do so at your own risk.


11.     What are the requirements to have F-Secure run on my LISTSERV installation?

Please note carefully that LISTSERV Lite does not support the virus scan feature. 

Requirements to be able to run the AV scan feature are as follows:

Also see:  F-Secure install documentation


12.     Why should I upgrade to the latest current version?

It is always a good idea to upgrade to the latest current version of an AV scanning software because although the older version will continue to work, the newer version may have changes to combat emergent types of malignant code that can't easily be backported via hotfixes into the older version.

When L-Soft approves a particular version of FSAV, that means that version of FSAV has been thoroughly tested by L-Soft and is known to work properly with LISTSERV.

In order to ensure that you are able to benefit from the new description method and maintain the virus detection capability of your F-Secure Anti-Virus products at the highest level, you should verify that you are using the latest version of the software. You can check the version number of your Windows software by right-clicking the F-Secure icon on the system tray and selecting "About".

For both Windows and Linux, L-Soft strongly recommends that LISTSERV should be upgraded to the latest version of LISTSERV (at this writing, 16.0-2017a) before applying the latest F-Secure anti-virus products.

For Windows:  If you are running LISTSERV 16.0-2014b or later, and have F-Secure Server Security Standard 12.11 in use, you do not need  to do anything (although we recommend upgrading LISTSERV to at least 16.0-2017a for other important reasons – please see the release notes for more information).

If you are using older versions, we strongly recommend that you update both LISTSERV and F-Secure.  LISTSERV 16.0-2014b or higher sites running earlier versions may at their option upgrade to F-Secure Server Security Standard 12.11; simply contact your sales representative for an F-Secure Server Security 12 key.  L-Soft strongly recommends that any site running LISTSERV 16.0-2014b or later should upgrade to LISTSERV 16.0-2017a and the appropriate level of F-Secure Server Security Standard 12.x.

DOCUMENTED RESTRICTION: Unfortunately, F-Secure no longer provides a standalone kit for FSAV for Windows Workstation (or for the replacement product F-Secure Client Security). This makes it impossible for L-Soft to provide FSAV kits for Windows Workstation class operating systems (7, 8.x, 10, and so forth).  Please see below for a discussion of alternatives.

 

For Linux:  If you are running LISTSERV 16.0-2014b or later and have F-Secure Linux Security 11.10 in use, you do not need to do anything (although we recommend upgrading LISTSERV to at least 16.0-2017a for other important reasons – please see the release notes for more information). 

If you are using older versions, we strongly recommend that you update both LISTSERV and F-Secure.  L-Soft strongly recommends that any site running LISTSERV 16.0-2014b or later should upgrade to LISTSERV 16.0-2017a and the appropriate level of F-Secure Linux Security 11.x.

Installation kits for the latest L-Soft certified versions of F-Secure Server Security Standard for Windows Servers and F-Secure Linux Security may be downloaded from L-Soft's FTP site at ftp://ftp.lsoft.com/f-secure .

Please contact your L-Soft sales representative to obtain an installation key for the appropriate version.

It is also important to check F-Secure's web site (best place to start is here) regularly for product hotfixes (L-Soft does not mirror the hotfixes).  Hotfixes are generally linked on the same web page as the anti-virus product to which they apply. 

When downloading F-Secure hotfixes for Windows, be sure to choose the ones for standalone environments (the "fsfix" version of the hotfix).  When fixes are available for FSLS for Linux, generally a complete installation kit is provided.  Please check the F-Secure website regularly for any subsequent hotfixes that may be provided.           

Earlier versions of F-Secure anti-virus software than those discussed in this document are obsolete and do not have a guaranteed uninterrupted virus signature update path. L-Soft STRONGLY RECOMMENDS that LISTSERV sites running upgrade LISTSERV to the latest supported version, after which the latest supported version of F-Secure Anti-Virus can be applied.


13.     [Linux] F-Secure dbupdate utility no longer downloads virus signature updates.

The dbupdate utility has been superseded in current versions of F-Secure Linux Security by the F-Secure Automatic Update Agent (fsaua).  If you are experiencing this problem, you are running an obsolete version of F-Secure anti-virus and should upgrade.

Earlier versions of F-Secure anti-virus software than those discussed in this document are obsolete and do not have a guaranteed uninterrupted virus signature update path. L-Soft STRONGLY RECOMMENDS that LISTSERV sites running upgrade LISTSERV to the latest supported version, after which the latest supported version of F-Secure Anti-Virus can be applied.


14.     [Windows Workstation OS] Why is there not a supported version of FSAV for Windows Workstation operating systems?

Starting with the release of F-Secure Client Security version 10, F-Secure no longer provided a standalone installation kit for the Client Security product. As noted above, this means that L-Soft can no longer provide an installation kit for those LISTSERV sites running on a Windows Workstation OS.

 

Sites running LISTSERV 16.0-2014b or later under a Windows Workstation variant such as Windows 7 or Windows 10 have the following options:

 

      Run LISTSERV with an antivirus product from another vendor that supports real-time scanning of compressed archives, by using the FOREIGN_ANTI_VIRUS site configuration parameter.

 

      Migrate the installation to a Windows Server platform.

 

Comments on this FAQ should be sent to manuals@lsoft.com. Please do not send support or sales inquiries to this address--it is for comments on the manuals only. If you need to ask a question that is not covered by this FAQ, see the support options outlined at the top of the page.

LISTSERV is a registered trademark licensed to L-Soft international, Inc.
All other trademarks, both marked and unmarked, are the property of their respective owners.
See Guidelines for Proper Usage of the LISTSERV Trademark for more details.