Installing McAfee VirusScan for Unix
Since McAfee VirusScan is a commercial anti-virus scanner you will have to purchase it.
If you already have bought a site license of some form you may be eligible to download a version suitable to you already, “free of extra charge” (It might be as easy as going to the download page, choosing “Product upgrade”, entering your organizations grant number, choosing
Download the version for your intended server OS.
Generic tar install (AIX/FreeBSD/HPUX/Linux/Solaris)
Put the package in a directory and unpack it (the linux version will be used in the example):
[root@mail ~]# mkdir viruscan4400
[root@mail ~]# mv vlnxp4440l.tar.Z viruscan4400/
[root@mail ~]# cd viruscan4400/
[root@mail viruscan4400]# tar xvzf vlnxp4440l.tar.Z
[root@mail viruscan4400]# gzip -cd < vlnxp4440l.tar.Z | tar xvf -
Then run the install-uvscan script (as root) to install into the default directory /usr/local/uvscan:
[root@mail viruscan4400]# ./install-uvscan
Which directory do you want to install into? [/usr/local/uvscan]
Uninstalling previous version … done.
Do you want to create the link(s) to uvscan in /usr/local/bin [y]/n
Do you want to create the link(s) to uvscan_secure in /usr/local/bin [y]/n
Do you want to create the link(s) to liblnxfv.so.4 in /usr/local/lib [y]/n
Do you want to create the link(s) to uvscan.1 in /usr/local/man/man1 [y]/n
Do you want to perform a scan of all filesystems y/[n]
And that’s all you need do. Now, to use it in MailScanner, first run update_virus_scanners to download the latest DAT files immediately:
[root@mail viruscan4400]# update_virus_scanners
and then edit MailScanner.conf to include mcafee in your “Virus Scanners” setting.
Notes and historical issues
Specific information regarding prerequisites are in the readme.txt (in all packages).
There are two versions for x86 Linux, where the vlnx4… version is for older kernels/distributions (2.2/2.4), and the vlnxp4… version is for more recent offerings (2.4/2.6 kernel, libc6, optimized for P4s (but works on regular pentiums)). This difference is not that well documented at the download page.
There are also versions for SCO Open Server and Linux on IBM S390. These lag a bit version-wise, and will be End Of Life with version 4320. Check the End Of Life list for current information.
Engine version 4320 is susceptible to this vunerability (ISS), McAfees PDF, McAfees FAQ. Solution is to update to 4400 immediately, and implies that 4320 is deprecated.
There has been issues using uvscan on systems where part of the scanned paths involved have been symbolic links. The standard recommendation (whether it still holds or not) is to not use symbolic links in conjunction with the mcafee scanner.
Some (older) versions have been known to need compatibility libc files installed (mainly linux versions), and has further been known to spew error messages about the inability to access the CD drive onto the textmode console.