Dr.Web Network Checker

Dr.Web Network Checker is designed for scanning data received over the network, with the scanning engine, as well as for distributed file scanning for threats. The component allows to establish a connection between network hosts with Dr.Web for UNIX Mail Servers installed on them for receiving and sending data (for example, file contents) via the network hosts for scanning. The component manages automatic distribution of scanning tasks (by sending and receiving them over the network) to all available network hosts with which the connection is configured. The component balances the load caused by the scanning tasks between the hosts. If there are no configured connections with remote hosts, the component sends all the data only to the local instance of Dr.Web Scanning Engine.

This component is always used to scan the data received over network connections. Thus, if the component is absent or unavailable, the operation of the components that send data for scanning over a network connection will be hindered (Dr.Web ClamD, SpIDer Gate, Dr.Web MailD).

 

This component is not designed to manage distributed scanning of files located in a local file system, since it cannot replace the Dr.Web File Checker component. To manage distributed scanning of local files, use the Dr.Web MeshD component.

 

In case of high intensity of scanning of data transferred via the network, there can be issues with scanning due to depletion of the number of available file descriptors. In this case, it is necessary to increase the limit to the number of file descriptors available to Dr.Web for UNIX Mail Servers.

Data can be shared either over an insecure channel or over a secure channel via SSL/TLS. To use a secure connection it is required to provide hosts that share files with valid certificates and SSL keys. To generate keys and certificates, you can use the openssl utility. An example of how to use the openssl utility to generate certificates and private keys is given in the Appendix E. Generating SSL certificates section.

 

Details:

Operating Principles

Command-Line Arguments

Configuration Parameters

Creating the Scanning Cluster