DirectAdmin

Pyxsoft Antimalware on a DirectAdmin server: installing the plugin, where to find it, how the DirectAdmin users become accounts, and how the email alerts are sent.

On a DirectAdmin server, Pyxsoft Antimalware comes with a DirectAdmin plugin: the same dashboard as in WHM, with the overview, detections, accounts, scans, quarantine, allowlist and settings.

Install

Run the installer as root. It detects DirectAdmin and installs the service and the plugin (pyxsoft-am and pyxsoft-am-da):

curl -s https://www.pyxsoft.com/install-anti-malware | bash

Then sign in to DirectAdmin as an administrator and open Extra Features → Pyxsoft Antimalware. Start the 7-day trial or enter your license code in Settings → License.

Pyxsoft Antimalware inside DirectAdmin’s Evolution skin: under the DirectAdmin header, the Overview tab with the detections to resolve, the real-time scanner and signatures status, the last and next global scans, engine speed and heuristics cards, 30-day counters, the detections-per-day chart and the recent activity list

Only administrators see the plugin. The pyxsoft command is also installed, as on every server: see Command Line.

Accounts

Each DirectAdmin user is an account, with its domains, subdomains and domain pointers. Scanning an account scans its whole home directory, except mail, backups and hidden folders. Websites that DirectAdmin does not manage but the web server serves, such as /var/www/html, are listed as accounts of their own, named after their domain.

Email alerts

DirectAdmin’s mail server only sends mail from the server itself to its own domains, so the alerts are sent by the Pyxsoft license server, from alerts@pyxsoft.com, as on a server without a panel:

  1. Enter the address in Settings → Notifications and save. It receives an email with a confirmation link.
  2. Open the link and click Confirm. Until then no alert is sent, and the settings show the address as waiting for confirmation, with a button to send the link again.
  3. Check it with Send test.

The alerts include the paths and domains of the findings. Nothing else from the server goes through the license server. How the alerts are delivered has the details.

This page is also available as markdown.