Skip to Main Content
Posted on

C-ICAP and ClamAV for ORDS

Category Oracle Database

Oracle REST Data Service (ORDS) has feature to scan uploaded files for viruses. You can install e.g. C-ICAP and ClamAV for that purpose. Here are steps how to do that on Ubuntu 18.04 server assuming you have already working ORDS installation on same or different server.

First install needed packages and dependencies.

sudo apt install libc-icap-mod-virus-scan libclamunrar9

After packages are installed, edit file /etc/default/c-icap to allow C-ICAP start

sudo sed -i 's/START=no/START=yes/g' /etc/default/c-icap

Edit file /etc/c-icap/c-icap.conf and add below lines to end of file

Include virus_scan.conf
Include clamav_mod.conf
virus_scan.DefaultEngine clamav
virus_scan.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GRAPHICS STREAM DOCUMENT
ServiceAlias AVSCAN virus_scan?allow204=on&sizelimit=off&mode=simple

Restart C-ICAP server

sudo systemctl restart c-icap

Next edit ORDS configuration file default.xml and add below lines to it before closing properties tag

<entry key="icap.port">1344</entry>
<entry key="icap.server">127.0.0.1</entry>

Change key icap.server value to point server where you did install C-ICAP if ORDS is running on different server.

After you have modify ORDS configuration, restart ORDS standalone or web server where ORDS is deployed.

With your own risk, you can try virus scanner with test files from www.eicar.org. Please read instructions, before downloading test files.

Comments

  • Jari Laine 14 Aug 2024

    Hi Rashiq,

    You need install and use “Customer Managed ORDS”.

    Regards, Jari

  • Rashiq 14 Aug 2024

    How We will do it in autonomous data base ORDS?

  • Benny Tate 26 Jan 2024

    This was perfect and worked awesome.

  • Jari Laine 1 Mar 2023

    Hi Kody,

    I couldn't find from ORDS documentation option to change ICAP url path (service name).
    Is there specific reason you need to change that?

    Regards,
    Jari

  • Kody 28 Feb 2023

    Have any one been able to figure out of ORDS has the ability to change the service name? Without C-ICAP Alias?
    Or where is the AVSCAN service name being hardcoded?

  • Jari Laine 23 Jan 2023

    Hi Steffen,

    I don't understand what you mean with below

    do you have an integration with APEX too?

    When you configure virus scanning for ORDS, it automatically scans files you upload using APEX.

    Regards,
    Jari

  • Steffen 23 Jan 2023

    Hi Jari,
    very nice - it works for me on Oracle Linux 8 - do you have an integration with APEX too?

  • Jari Laine 16 Aug 2022

    Hi Nikolay,

    Yes I did test with eicar test malware when posted instructions.

    Have you install C-ICAP according this blog post and using same Ubuntu version?

    Regards,
    Jari

  • Nikolay 15 Aug 2022

    Have you tested this with eicar test malware file at seems to not work?

  • Jon 10 Mar 2022

    Thanks for this!