Last updated 30 Oct 2011
LISTSERV 14 (1.8e) and following includes an Anti-Virus Scanning feature for messages passing through the server. This is a value-added enhancement which requires a special LAK and F-Secure Anti-Virus. At this writing the feature is only available for Windows XP Pro SP3/Vista/7/2003/2008 and Linux servers running LISTSERV Classic or LISTSERV Classic HPO. (Other OS platforms are supported through the LISTSERV AVS. There is no intent to make this functionality available in the Lite version of the product.)
L-Soft's regular support addresses are reserved for LISTSERV maintainers' use only. List owners should use alternate avenues (some listed below), and may not write directly to L-Soft for help.
With your paid maintenance, you will receive the following:
Other F-Secure Anti-Virus products, purchased separately directly from F-Secure, may work with LISTSERV as well, but are not certified by L-Soft, and there are no guarantees of interoperability.
1. Real Time protection enabled (mandatory)
2. Action: "Delete Automatically" (strongly recommended)
3. Scanning Options: "Files with these extensions"
4. Scan inside compressed files: "checked"
5. LISTSERV and/or LSMTP spool directories must be exempted from scanning.
6. *.mail, *.mai or *.job files must be exempted from scanning. (Technically speaking, if you apply point 5, you should not have to explicitly exempt any LISTSERV or LSMTP file types.)
7. We do not recommend (nor do F-Secure recommend) that the "Scanning Options" box titled "All files" be checked. This can lead to serious performance degradation and is strongly discouraged.
For F-Secure Linux Security 9.x and later, please refer to L-Soft's "Installing F-Secure Anti-Virus" guide for important post-installation configuration steps.
Issue a "SHOW VERSION" command to LISTSERV. The response should include a line like the following:
Virus database version: 2011-03-16 10:01:35 (F-Secure Anti-Virus 9.20)
When LISTSERV starts it sends the command "fsav /version" (Windows) or "fsav --version" (Linux) to FSAV. If there is a problem with the response, LISTSERV's AV scan feature will be disabled.
You must also have current paid maintenance for the AV scan feature to work. This means that for sites with perpetual (non-expiring) Product LAKs, an additional Maintenance LAK must be installed. (For sites with non-perpetual Product LAKs, your maintenance expires at the same time as your Product LAK.) To check your maintenance status, issue a SHOW LICENSE command to LISTSERV. There should be a line in the response that looks like this:
If the SHOW LICENSE output says
either your maintenance has expired or you have not received or applied your maintenance LAK. If you need a new maintenance LAK, please contact your L-Soft sales representative. (The support department cannot issue LAKs.)
If maintenance is current, try another stop/start of LISTSERV.
Check with firstname.lastname@example.org before doing so to make sure that it has been tested for use with LISTSERV. Please note that you will need a different F-Secure Anti-Virus license key from your Sales Representative before installing the latest version.
As of the date of this FAQ:
FSAV 9.00 for Windows Servers is approved for use with LISTSERV 15.0 or later for Windows Servers.* If you are running an earlier version and wish to upgrade, contact your sales representative for an FSAV for Windows Servers 9.00 key.
FSAV 9.20 for Windows Workstations is approved for use with LISTSERV 15.0 or later for Windows Workstations.*
If you are running an earlier version and wish to upgrade, contact your sales representative for an FSAV 9.20 for Windows Workstations key.
Minimum patch versions: FSAV 9.20 for Windows Workstations requires Windows XP with SP3, Windows Vista, or Windows 7.
F-Secure Linux Security (FSLS) 9.10 running as a command-line-only installation is approved for use with LISTSERV 15.0 or later for Linux.* If you are running an earlier version and wish to upgrade, contact your sales representative for an FSLS 9.10 key. (The "full server" version of FSLS 9.10 is not supported for use with LISTSERV.)
* We recommend upgrading LISTSERV to at least version 16.0-2011a because of an incompatibility introduced between LISTSERV and the 9.x versions of the F-Secure products. The incompatibility may result in occasional spurious reports from LISTSERV of out-of-date anti-virus signatures. This incompatibility is fixed in LISTSERV version 16.0-2011a. To ensure that you have at least LISTSERV version 16.0-2011a, issue a SHOW LICENSE to your LISTSERV server. The build date reported should be 8 Sep 2011 or later.
Yes, to a limited extent, under Windows only. Please see the LISTSERV manuals for information on the FOREIGN_ANTI_VIRUS site configuration parameter and its use.
No, this is the default if you are running Classic with current maintenance. LISTSERV checks for FSAV running on the server when it starts.
For Windows: Add
to your site.cfg file and restart LISTSERV.
For Linux: Add
to your go.user file and restart LISTSERV.
(Note for LISTSERV 15.0 and following: If this variable has been previously set via the web administration interface, you will need to set it there rather than in go.user.)
LISTSERV only checks the time stamp of the database files. It does not check the last time it was checked by the F-Secure Auto-Update Agent. In rare cases, F-Secure may not have a virus signature update for 5 days or longer, so when the database file is determined to be five days old, LISTSERV begins notifying the non-quiet postmaster(s) to alert them to a possible problem.
In this case you should do the following:
Windows: Check F-Secure's Automatic Update Agent to make sure that it is running. If it is, and if "fsav /version" reports that the signatures are up to date, then the warning can be ignored.
Linux: Check to make sure that the F-Secure Automatic Update Agent (fsaua) is running. This can be done with `service fsaua status` under Red Hat-like distributions. If it is, and if "fsav --version" reports that the signatures are up to date, then the warning can be ignored.
Yes, with the LICENSE_WARNING= site configuration variable (please see the Site Manager's Manual, Appendix C, for details). Please be aware this also turns off most LISTSERV license warnings, including warnings that inform you that your maintenance is about to expire, or that your product LAK is about to expire. It is L-Soft's strong recommendation that license warnings not be disabled under any circumstances, and then only with the understanding that you do so at your own risk.
Please note carefully that LISTSERV Lite does not support the virus scan feature.
Requirements to be able to run the AV scan feature are as follows:
Also see: F-Secure install documentation
It is always a good idea to upgrade to the latest current version of an AV scanning software because although the older version will continue to work, the newer version may have changes to combat emergent types of malignant code that can't easily be backported via hotfixes into the older version.
When L-Soft approves a particular version of FSAV, that means that version of FSAV has been thoroughly tested by L-Soft and is known to work properly with LISTSERV.
In order to ensure that you are able to benefit from the new description method and maintain the virus detection capability of your F-Secure Anti-Virus products at the highest level, you should verify that you are using the latest version of the software. You can check the version number of your Windows software by right-clicking the F-Secure icon on the system tray and selecting "About".
Windows: If you are running LISTSERV 15.0 or later, and have F-Secure Anti-Virus 9.00 (or 9.20 for Windows XP SP3/Vista/7) in use, you do not need to do anything. If you are using older versions, we strongly recommend that you update your anti-virus product. LISTSERV 15.0 or higher sites running earlier versions may at their option upgrade to FSAV 9.x; simply contact your sales representative for an FSAV 9.x key. NOTE: FSAV versions 5.x and 8.x are no longer officially supported by F-Secure. L-Soft therefore strongly recommends that any site running LISTSERV 15.0 or later should upgrade to the appropriate level of FSAV 9.x.
If you are running LISTSERV 14.3, 14.4, or 14.5, and have F-Secure Anti-Virus 5.52 (or 5.44 for Windows 2000 Workstation or Windows XP) in use, we strongly recommend that you update your LISTSERV product and then upgrade to the latest version of the antivirus product. NOTE: FSAV version 5.x and 8.x are no longer officially supported by F-Secure. L-Soft therefore strongly recommends that any site running LISTSERV 14.x should upgrade to the latest version of LISTSERV (at this writing, 16.0-2011a) so that they may also upgrade to FSAV 9.x.
For Linux, simply issue an 'fsav --version' command from the shell prompt (assuming 'fsav' is in your path). If you are running LISTSERV 15.0 or later and have F-Secure Linux Security 9.x in use, you do not need to do anything. If you are using older versions, we strongly recommend that you update your anti-virus product.
If you are running LISTSERV 14.3, 14.4, or 14.5 and have F-Secure Anti-Virus 4.65 or F-Secure Linux Security 7.x in use, we strongly recommend that you update your LISTSERV product and then upgrade to the latest version of the antivirus product. NOTE: FSAV version 4.x and 7.x are no longer officially supported by F-Secure. L-Soft therefore strongly recommends that any site running LISTSERV 14.x should upgrade to the latest version of LISTSERV (at this writing, 16.0-2011a) so that they may also upgrade to FSAV 9.x.
Installation kits for the latest L-Soft certified versions of FSAV for Windows Servers, FSAV for Windows Workstations, and F-Secure Linux Security may be downloaded from L-Soft's website at ftp://ftp.lsoft.com/f-secure .
Please contact your L-Soft sales representative to obtain an installation key for the appropriate version.
It is also important to check F-Secure's web site (best place to start is here) regularly for product hotfixes (L-Soft does not mirror the hotfixes). Hotfixes are generally linked on the same web page as the anti-virus product to which they apply.
When downloading F-Secure hotfixes for Windows, be sure to choose the ones for standalone environments (the "fsfix" version of the hotfix). When fixes are available for FSLS for Linux, generally a complete installation kit is provided. Please check the F-Secure website regularly for any subsequent hotfixes that may be provided.
In order to avoid this problem, sites running LISTSERV 15.0 and later with current maintenance may upgrade to F-Secure Linux Security 9.00. Please contact your sales representative for an activation key for FSLS 9.00
With the release of FSAV version 9, F-Secure no longer supports real-time scanning of compressed archives in FSAV for Windows Workstations. This means that sites running LISTSERV on a Windows Workstation platform (e.g., Windows XP) will not be able to prevent compressed files containing malicious payloads from being distributed if using FSAV 9 for anti-virus scanning.
Sites running LISTSERV 15.0 or later under a Windows Workstation variant such as Windows XP or Windows 7 have the following options:
Comments on this FAQ should be sent to email@example.com. Please do not send support or sales inquiries to this address--it is for comments on the manuals only. If you need to ask a question that is not covered by this FAQ, see the support options outlined at the top of the page.
LISTSERV is a registered trademark
licensed to L-Soft international, Inc.
All other trademarks, both marked and unmarked, are the property of their respective owners.
See Guidelines for Proper Usage of the LISTSERV Trademark for more details.