Suitecrm and Clam AV/Sophos Anti-virus? šŸ¤”

So I found this section in the config.php file:


However interestingly enough there isn’t written a single word about it in the documentation about it and if you make a search on the internet there is extremely few internet pages mentioning anything about it.

1.) So do you any of you guys know how to do this?
2.) And if so did you get it successfully to work?

Thanks…

I never read any docs about this either, and never tried it.

I see it’s called during file uploads.

I suppose you have to have either Clam AV or Sophos installed in Linux beforehand, for it to work.

However interestingly enough there isn’t written a single word about it in the documentation about it

Yes, unfortunately. It sems to me the only one mention of this functionality was in this PR:

Hmm that is both interesting and sad on the same time.
I mean the idea to implement some kind of virus scan to protect the system makes sense. Just hard to do it when there is no information/very little information.

It doesn’t look difficult - just install in Linux, and check if the configuration in config.php points to the correct path / options.

Then get the test file that every vendor recognizes as a virus and upload it into SuiteCRM: Download Anti Malware Testfile – Eicar

1 Like

There is another problem: this feature is not mentioned anywhere in the docs and, in fact, few people know about it.

1 Like

We hope to have some documentation up for this feature in the near future.

As @pgr has already highlighted the setup is mostly outwith SuiteCRM.

It’s basically a connector to third party scanning engines. When using ClamAV, it should be configured to listen on a tcp socket. ClamAV can be installed on your SuiteCRM server, or ideally on a standalone server or isolated environment with network connectivity back to the clam tcp service.

Once clam is setup then update your config to point to the clam server, set the type to either ā€˜local’ or ā€˜remote’ and change ā€˜enabled’ to true.

Hopefully this helps get you going.

3 Likes

Do we need anti-virus on the crm server? Do we have document now? Could you please provide installation steps?

Unfortunately its quite limited how much information there is about installing anti-virus on SuiteCRM. If only the admins/dev could post more information… :pray:

That’s true. You could see these lines of code under config.php file.

'anti_malware_scanners' => 
  array (
    'SuiteCRM\\Utility\\AntiMalware\\Providers\\ClamTCP' => 
    array (
      'name' => 'ClamAntiVirus TCP',
      'support_page' => 'https://www.clamav.net/',
      'enabled' => false,
      'path' => NULL,
      'options' => 
      array (
        'ip' => '127.0.0.1',
        'port' => 3310,
        'type' => 'local',
      ),
    ),
    'SuiteCRM\\Utility\\AntiMalware\\Providers\\Sophos' => 
    array (
      'name' => 'Sophos Anti Virus (Linux)',
      'support_page' => 'https://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-linux.aspx',
      'enabled' => false,
      'path' => '/opt/sophos-av/bin/savscan',
      'options' => '-ss',
    ),
  ),

Did you install ClamAV on your VPS? It looks pretty straight forward, just put the path.

Yep, pretty much. :smiley:

It is quite well hidden so if you do not read the config file like I did, you will never know that the function existed. :man_shrugging:

But that is about all information there is. Nothing has ever been written into the SuiteCRM documentation. But as you can see in this thread the function does exist.

The big obvious question is just ā€œhowā€, which still remains an conundrum on how to implement the function.

It does makes a lot of sense though I think to have a anti virus safe guarding the installation. It only takes one employee which uploads something and well… You might have a BIG headache ahead that you will have to deal with… :scream_cat:

Yeah! You can create the documentation on it and post to SuiteCRM Wiki.

GitHub - salesagility/SuiteDocs: SuiteCRM - Open source CRM for the world

If you install it and try on your server, let us know.

1 Like

I did not try it on VPS. :face_with_peeking_eye:

Thanks!
Nice findings… :+1:
That requires though that you run C-panel.
What if you run it raw for example on a ubuntu server with SuiteCRM and want to do a clean installation or run Plesk instead, right?

https://help.ubuntu.com/community/ClamAV

https://www.clamav.net/