2649698acd
Signed-off-by: Nextcloud bot <bot@nextcloud.com> |
||
---|---|---|
.github | ||
.tx | ||
appinfo | ||
css | ||
img | ||
js | ||
l10n | ||
lib | ||
screenshots | ||
templates | ||
tests | ||
.gitignore | ||
.nextcloudignore | ||
.php_cs.dist | ||
.scrutinizer.yml | ||
CHANGELOG.md | ||
LICENSE | ||
README.md | ||
composer.json | ||
composer.lock | ||
krankerl.toml | ||
psalm.xml |
README.md
Nextcloud Antivirus for Files
files_antivirus
is an antivirus app for Nextcloud using ClamAV, Kaspersky or an ICAP compatible scanner.
Features
- 🐿️ When the user uploads a file, it's checked
- ☣️ Infected files will be deleted and a notification will be shown and/or sent via email
- 🔎 It runs a background job to scan all files
Requirements
One of
- ClamAV as binaries on the Nextcloud server
- ClamAV running in daemon mode
- Kaspersky Scan Engine running in HTTP mode
- Any virus scanner supporting ICAP (ClamAV and Kaspersky are tested, others should work)
Install
Documentation about installing ClamAV and this app can be found in our documentation.
ClamAV Details
This app can be configured to work with the executable or the daemon mode (recommended ❤️) of ClamAV. If this is used in daemon mode, it can connect through network or local file-socket. In daemon mode, it sends files to a remote/local server using the INSTREAM
command.
Kaspersky HTTP Details
When running Kaspersky in HTTP mode the SessionTimeout
will need to be set to a value higher than default, a value of 10 minutes (600000 millisecond) or higher is recommended to properly deal with larger uploads
ICAP (version 4.0 and later)
The app support the ICAP protocol which is a standard supported by various antivirus software products.
Some additional configuration is required depending on the antivirus software used:
- ICAP service: The name of the service the antivirus software expects
- ICAP virus response header: The name of the header the antivirus software send the details of the detected virus in
ClamAV ICAP
- ICAP service:
avscan
- ICAP virus response header:
X-Infection-Found
Kaspersky ICAP
- ICAP service:
req
- ICAP virus response header:
X-Virus-ID
Additionally, the Kaspersky scan engine needs some additional configuration:
- "Allow204" should be enabled.
- For version 2.0 and later, the virus response header needs to be configured