arobertlobo5 / Odoo-antivirus

Antivirus plugin for openerp

Odoo antivirus

Openerp 7 antivirus plugin.

Clamav daemon and virustotal quickstart:

• To install clamav deamon: [ubuntu/debian]: > sudo apt-get install clamav clamav-daemon
• To update virus definitions: > sudo freshclam
• To check if it's running: > ps ax | grep [c]lamd
• To edit options like max filesize etc. > sudo nano /etc/clamav/clamd.conf then sudo /etc/init.d/clamav-daemon restart
• For other distributions check clamav manual
• For use of virustotal api: pip install virustotal-api
• Virustotal api needs api key, it can be obtained after registering www.virustotal.com

Configuration quickstart:

• Add new configuration in Antivirus->Config menu
• Fill all fields, for virustotal api keys You should register at virustotal.com, it's free.
• Check "Use this config". Only one config can be active at once.
• Add new scanner named antivir.scanner.clamav .

Extending hints:

• Adding new scanners is easy You should create file like scanner_clamav.py
• There is nice Python Wrapper library working with many commercial AV's https://github.com/nuncjo/multiav

Features:

• Scans files on attachments create
• Full list of ClamAV features at http://www.clamav.net/
• Online scan by Virustotal api: manual hash checking for quarantined files analysis, could be simply extended if needed.

Policy:

• Default infected files policy: delete in frontend, store in quarantine for further analysis, blacklisting etc.
• Unsafe files scanned by cron are hidden from user. This can be customized by using ir.rule in security.xml.
• Files hidden after scan can be restored from quarantine by admin by checking "Virus safe" or/and moving to whitelist.

Notice:

• Clamav offers only basic protection compared to commercial antivirus software, I encourage You to extend this plugin to use more sophisticated protection.
• Odoo antivirus is rather skeleton for extending with dedicated commercial antivirus solutions.

Future extension possibilites:

• Scanning website urls in mails in external services/checking in phising databases etc.
• More pre defined scanners.
• Predefined hash databases (like http://virusshare.com/).
• Hash checking for every file in archives
• Antispam mail extension.
• Periodic reports and statistics.

Source code: https://github.com/nuncjo/Odoo-antivirus