|
Anti-virus software |
  
|
|
Anti-virus software |
|
SmartPOP2Exchange is able to test incoming messages for viruses using the integrated ClamAV or your installed antivirus software.
(Only available in the Enterprise version and trial)
The integrated anti-virus is the windows version of ClamAV: ClamWin (http://www.clamwin.com)
"Clam AntiVirus is an open source (GPL) antivirus toolkit for UNIX, designed especially for email scanning on mail gateways. [...] The core of the package is an antivirus engine available in a form of shared library.
Here is a list of the main features:
* [...]
* advanced database updater with support for scripted updates and digital signatures
* virus scanner C library
* virus database updated multiple times per day (see home page for total number of signatures)
* built-in support for various archive formats, including Zip, RAR, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others
* built-in support for almost all mail file formats
* built-in support for ELF executables and Portable Executable files compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and shrouded with SUE, Y0da Cryptor and others
* built-in support for popular document formats including MS Office and MacOffice files, HTML, RTF and PDF"
(Source: http://www.clamav.net/about/lang-pref/en/)
Installed anti-virus software can be used by SmartPOP2Exchange as long as it includes an "On Access Scanner", that checks all files written to the hard disk.
Common settings for any virus software you want to use with SmartPOP2Exchange are:
| • | If a virus is found (files and archives) the software must not prompt for any user interaction. Set "delete file" or "move/rename file" as action to be taken. |
| • | Disable any scanning of POP3/IMAP or SMTP protocols/streams. This option is often described as "Scan incoming/outgoing mail". |
The specific behavior varies a bit depending on the anti-virus software you use.
Below, we will provide detailed configuration instructions for some anti-virus software systems:
It is important that the mail scanner of GData is disabled otherwise SmartPOP2Exchange will not work correctly.
GData AntiVirus is delivered with an "On Access Scanner", that is able to notice if an infected file was written to/ read from the hard disk. The "On Access Scanner needs time to test attachments, therefore, the downloading of messages will take longer.
To make SmartPOP2Exchange and GData virus scanner work together, some changes in the configuration of the "AVK Guard" are necessary:
| • | Infected files have to be moved or deleted without prompting. |
| • | Infected archives should be handled without prompting a warning. |
| • | Files have to be scanned while writing to disk. |
| • | Also scan archives. Most viruses attached to emails are in an archive (e.g. *.zip Files). |
| • | Email virus detection has to be turned off: turn off incoming and outgoing POP3, IMAP and SMTP scanning |
BitDefenders virus scanners are able to check incoming messages. If you enable the appropriate antivirus feature in the Antivirus options form, SmartPOP2Exchange activates this function in your scanner. After activating it all forwarded Messages containing a virus will be replaced by a notification message from the antivirus software.
Kaspersky virus scanners are delivered with a so called "On Access Scanner", that is able to notice if an infected file was write to/ read from the hard disk.
The "On Access Scanner needs time to test attachments, therefore, the downloading of messages will take longer.
To make SmartPOP2Exchange and Kaspersky virus scanner work together some changes in the configuration of the "antivirus Monitor" have to be made.
Following changes are required:
| • | Viruses have to be renamed or deleted without asking. |
| • | Disable the warning message box. |
| • | Also scan archives. Most viruses attached to emails are in an archive (e.g. *.zip Files). |
Following changes are recommended:
| • | To get better results scan all files (not only files that may being infected). |
| • | Allow Kaspersky to provide a Report File informing you if any viruses were found. |
Sophos virus scanners are delivered with a so called "On Access Scanner", that is able to notice if an infected file was write to/ read from the hard disk.
The "On Access Scanner needs time to test attachments, therefore, the downloading of messages will take longer.
To make SmartPOP2Exchange and Sophos virus scanner work together some changes in the configuration of the "InterCheck - Client" have to be made.
Following changes are required:
| • | Viruses have to be renamed, removed or deleted without asking. |
| • | Files have to be scanned while writing to disk. |
| • | Also scan compressed files. Most viruses attached to emails are in an archive (e.g. *.zip Files). |
Following changes are recommended:
| • | Scan Files while reading and renaming files. |