| | |
| |
Configuring
Avast and Sophos
To configure your integrated virus solution, you simply need
to open the MailMax Admin Tool, click the 'System Settings'
button and go to the 'Virus Settings' tab. This is where you
will configure both internal and external virus scanning.
The dialog will look different depending on which internal
anti-virus solution you have purchased.
Enable
Internal Virus Check
Simply check the box to enable the solution you have purchased.
Recursion Depth
When encountering MIME email with nested contents, this
controls how deeply into the nesting that the virus scanner
will scan. For example, if you receive a .zip file that
contains ten other .zip files, you would need your recursion
rate set higher to catch the virus.
File Types
Avast and Sophos have slightly different 'File Types' settings
that need to be noted.
You can set Avast to scan these file types:
• Full file. (More than 8K of the file is examined
for viruses)
• All files (Files other than .EXE files and libraries
are tested.) Only first 8K of file tested.
• Test all fully. (Full contents of all files are
examined)
Sophos scans file types that are DOS files, Macintosh files
or both.
Both solutions allow you to selectively enable/disable file
types that are to be checked. Simply check or uncheck each
type as the examples below show.
Avast Integrated Anti-Virus Solution:
Sophos Integrated Anti-Virus Solution:
Enable External Virus Check
MailMax is compatible with any virus scanning software as
long as it supports a command line option. Simply check
the box to enable and enter the command line for the anti-virus
solution. It should consist of the path to the executable
program to run plus any additional command-line arguments.
SMTPMax will add a final command line argument consisting
of the path to the directory where an extracted file attachment(s)
may be found. If the virus program removes any files from
the directory, then the email will be considered infected
and will be discarded. |
| |
| |
What
happens to an email when a virus is detected?
Administrators have several options in dealing with
an infected email. You can use a combination of the options
below to handle an infected email(s).
Quarantine
Inbound and/or outbound mail containing viruses will be sent
to the email address specified for later inspection or destruction.
Notify Sender
An email alert will be sent to the sender of the virus.
Notify Recipient
An email alert will be sent the the recipient of the virus.
Attempt to Disinfect
An attempt will be made to remove the virus from the transferred
executable and then it will be passed on through as "cleaned".
|
| |
| |
What
does an infected email with notification look like?
1. The screenshot below is a message that was received by
mike@standingonzero.com. The attachment is the virus notification,
so you will need to open it to get more information.
2. The screenshot below is the actual virus notification attachment.
It tells you that a virus was detected, the original name
of the file that was detected and stripped from the email,
the virus name and the recipient's email address.
|
|
 |
