Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Antivirus
  FAQ FAQ  Forum Search   Register Register  Login Login

Antivirus

 Post Reply Post Reply
Author
cwbrandsdal View Drop Down
Newbie
Newbie


Joined: 25 September 2007
Status: Offline
Points: 9
Post Options Post Options   Thanks (0) Thanks(0)   Quote cwbrandsdal Quote  Post ReplyReply Direct Link To This Post Topic: Antivirus
    Posted: 26 September 2007 at 9:36am
Hi.
 
Is there any way I could user my existing McAfee antivirus scan for scanning emails in SPAM Filter ISP?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 28 September 2007 at 4:45am
SpamFilter only integrates with our optional antivirus plugin. If you do have another antivirus prpoduct scanning your file-system however, SpamFilter is "antivirus-friendly". This means that you can configure SpamFilter to spool incoming emails to disk rather than to memory. This allows your existing antivirus, if it is fast enough, to intercept any viruses that are present in the files and remove them. If SpamFilter sees that one of its spool files is missing, it will "understand" that most likely our A/V removed the file, and will thus continue to process the other emails without worrying about the missing one.

Please see the manual in regards to the following option:

{TODO -cNew : Added SpoolQueueFilesToMemory SpamFilter.ini option to force emails to be spooled to disk}

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
mikek View Drop Down
Senior Member
Senior Member
Avatar

Joined: 22 February 2005
Location: Switzerland
Status: Offline
Points: 133
Post Options Post Options   Thanks (0) Thanks(0)   Quote mikek Quote  Post ReplyReply Direct Link To This Post Posted: 26 November 2007 at 7:17am
to which directory are those files spooled (/queue or /temp), meaning which directories must I include or can I exclude to catch the viruses with an external file-based scanning solution?

Edited by mikek - 26 November 2007 at 7:22am
Mike Kellenberger
Work: http://www.escapenet.ch
Private: http://www.kellyburger.com
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 26 November 2007 at 11:39am
MikeK,
 
They should be spooled to the temp folder if you are trying to Virus Scan.  99.9% sure.
 
CORRECTION:
Actually ... with the "spool to disk" option, they may go to the queue folder.


Edited by Desperado - 26 November 2007 at 1:55pm
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 26 November 2007 at 4:40pm
SpamFilter will spool temp message files in the SpamFilter\queue directory (and attachments in the SpamFilter\temp directory) regardless of the "SpoolQueueFilesToMemory" setting. This is done in case something happens while processing the email we have a backup on disk.

If the option
SpoolQueueFilesToMemory=1

is enabled, SpamFilter will also spool to RAM to increase performance, and will use the RAM copy for processing. Since it's using the RAM, it will ignore the file-based version.

This said, if you disable the spooling to RAM by setting:
SpoolQueueFilesToMemory=0

SpamFilter will rely on the file-based spool. If the antivirus deletes a file in the SpamFilter\queue directory (this is the one you want to monitor), then SpamFilter will assume there was a virus-related problem and will ignore the email.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
mikek View Drop Down
Senior Member
Senior Member
Avatar

Joined: 22 February 2005
Location: Switzerland
Status: Offline
Points: 133
Post Options Post Options   Thanks (0) Thanks(0)   Quote mikek Quote  Post ReplyReply Direct Link To This Post Posted: 27 November 2007 at 2:15am
thanks, roberto. as always, a fast and precise answer, exactly what I needed to know!
Mike Kellenberger
Work: http://www.escapenet.ch
Private: http://www.kellyburger.com
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.063 seconds.