SpIDer Guard for SMB

SpIDer Guard for SMB is a monitor of file system directories used by the SMB file server Samba as shared directories. This component is designed to monitor actions applied to files in Samba shared directories. It operates as a resident monitor and controls basic actions in the protected file system (creation, opening, closing, as well as read and write operations). Once the component intercepts such operation, it checks whether the file was modified and if so, a task to scan the file is created and sent to the Dr.Web File Checker file scanning component. If the file requires scanning, Dr.Web File Checker, in its turn, initiates scanning of the file contents by Dr.Web Scanning Engine. If the file contains a threat, it is blocked for access for a period specified in settings until the threat is neutralized. Moreover, the component can be set up to block the file in case of a scanning error (including cases when there is no valid license).

To avoid potential conflicts between SpIDer Guard and SpIDer Guard for SMB, which may occur in the process of scanning files in Samba shared directories, it is recommended that you additionally configure SpIDer Guard by performing one of the following actions:

•exclude the Samba shared directories (specify them in the ExcludedPath parameter);

•add the Samba process (smbd) to the list of ignored processes (specify smbd in the ExcludedProc parameter).

The SpIDer Guard for SMB monitor uses a custom VFS SMB module to integrate with Samba. Several versions of the VFS SMB module built for different versions of Samba are supplied with the SpIDer Guard for SMB component; however, they may be incompatible with the version of Samba installed on your file server, for example, if your Samba server uses the CLUSTER_SUPPORT option.

If VFS SMB modules are incompatible with your Samba server, build the VFS SMB module for your Sambа server with the CLUSTER_SUPPORT option if necessary. The procedure of building the VFS SMB module from source code is described in the Building the VFS SMB Module section.