How to scan FTP uploaded files on cPanel Servers

This article will assist you to scan virus uploaded via FTP to create certain all files are virus free:

First let’s install ClamAV, it’s been now been enclosed in Cpanel/WHM. Clam AntiVirus (ClamAV) may be a free and open-source, cross-platform antivirus software tool-kit able to observe many type of malicious software , as well as viruses. One among its main uses is on mail servers as a server-side email virus scanner.

As root You can also install it from your WHM interface, for these follow as given below:

Step 1: Click on ‘cPanel’ in ‘WHM’

clamAV-1

Step 2: Click on ‘Manage Plugins’

clamAV-2

Step 3: Now Click on ‘clamavconnector’

clamAV-3

Check the “Install and Keep Updated” and then click at the bottom of the page to save.

After the successful installation edit the file /etc/pure-ftpd.conf and change this line to CallUploadScript yes

Next create file /etc/pure-ftpd/clamav_check.sh with this content:

#!/bin/bash
#Maximum file size to scan in bytes that's set to 10MB
MAXSIZE=10485760
if [ "$UPLOAD_SIZE" -le "$MAXSIZE" ]; then
/usr/bin/clamdscan --remove --quiet --no-summary "$1"
fi

Change its permissions and make it executable:

 chmod 755 /etc/pure-ftpd/clamav_check.sh

Now we should start the pure-uploadscript daemon every time to call our script when a file is uploaded

 /usr/sbin/pure-uploadscript -B -r /etc/pure-ftpd/clamav_check.sh

And to let it start with your server/vps reboots just run this :

echo “/usr/sbin/pure-uploadscript -B -r /etc/pure-ftpd/clamav_check.sh” >> /etc/rc.d/rc.local

Now restart pure-ftpd:

service pure-ftpd restart

Now all your uploaded files which are less than 10MB in size will be scanned, adjust this size limit per your needs.