Antivirus |
Post Reply 
|
| Author | |
cwbrandsdal 
Newbie 
Joined: 25 September 2007 Status: Offline Points: 9 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: AntivirusPosted: 26 September 2007 at 9:36am |
|
Hi.
Is there any way I could user my existing McAfee antivirus scan for scanning emails in SPAM Filter ISP?
|
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 28 September 2007 at 4:45am |
|
SpamFilter only integrates with our optional antivirus plugin. If you do have another antivirus prpoduct scanning your file-system however, SpamFilter is "antivirus-friendly". This means that you can configure SpamFilter to spool incoming emails to disk rather than to memory. This allows your existing antivirus, if it is fast enough, to intercept any viruses that are present in the files and remove them. If SpamFilter sees that one of its spool files is missing, it will "understand" that most likely our A/V removed the file, and will thus continue to process the other emails without worrying about the missing one.
Please see the manual in regards to the following option: {TODO -cNew : Added SpoolQueueFilesToMemory SpamFilter.ini option to force emails to be spooled to disk} |
|
|
|
|
mikek
Senior Member 
Joined: 22 February 2005 Location: Switzerland Status: Offline Points: 133 |
Post Options
Thanks(0)
Quote Reply
Posted: 26 November 2007 at 7:17am |
|
to which directory are those files spooled (/queue or /temp), meaning which directories must I include or can I exclude to catch the viruses with an external file-based scanning solution?
Edited by mikek - 26 November 2007 at 7:22am |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 26 November 2007 at 11:39am |
|
MikeK,
They should be spooled to the temp folder if you are trying to Virus Scan. 99.9% sure.
CORRECTION:
Actually ... with the "spool to disk" option, they may go to the queue folder. Edited by Desperado - 26 November 2007 at 1:55pm |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 26 November 2007 at 4:40pm |
|
SpamFilter will spool temp message files in the SpamFilter\queue directory (and attachments in the SpamFilter\temp directory) regardless of the "SpoolQueueFilesToMemory" setting. This is done in case something happens while processing the email we have a backup on disk.
If the option SpoolQueueFilesToMemory=1 is enabled, SpamFilter will also spool to RAM to increase performance, and will use the RAM copy for processing. Since it's using the RAM, it will ignore the file-based version. This said, if you disable the spooling to RAM by setting: SpoolQueueFilesToMemory=0 SpamFilter will rely on the file-based spool. If the antivirus deletes a file in the SpamFilter\queue directory (this is the one you want to monitor), then SpamFilter will assume there was a virus-related problem and will ignore the email. |
|
|
|
|
mikek
Senior Member
Joined: 22 February 2005 Location: Switzerland Status: Offline Points: 133 |
Post Options
Thanks(0)
Quote Reply
Posted: 27 November 2007 at 2:15am |
|
thanks, roberto. as always, a fast and precise answer, exactly what I needed to know!
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.113 seconds.