Print Page | Close Window

Antivirus

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6257
Printed Date: 09 May 2025 at 1:09am


Topic: Antivirus
Posted By: cwbrandsdal
Subject: Antivirus
Date Posted: 26 September 2007 at 9:36am
Hi.
 
Is there any way I could user my existing McAfee antivirus scan for scanning emails in SPAM Filter ISP?


Replies:
Posted By: LogSat
Date Posted: 28 September 2007 at 4:45am
SpamFilter only integrates with our optional antivirus plugin. If you do have another antivirus prpoduct scanning your file-system however, SpamFilter is "antivirus-friendly". This means that you can configure SpamFilter to spool incoming emails to disk rather than to memory. This allows your existing antivirus, if it is fast enough, to intercept any viruses that are present in the files and remove them. If SpamFilter sees that one of its spool files is missing, it will "understand" that most likely our A/V removed the file, and will thus continue to process the other emails without worrying about the missing one.

Please see the manual in regards to the following option:

{TODO -cNew : Added SpoolQueueFilesToMemory SpamFilter.ini option to force emails to be spooled to disk}



-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: mikek
Date Posted: 26 November 2007 at 7:17am
to which directory are those files spooled (/queue or /temp), meaning which directories must I include or can I exclude to catch the viruses with an external file-based scanning solution?

-------------
Mike Kellenberger
Work: http://www.escapenet.ch - http://www.escapenet.ch
Private: http://www.kellyburger.com - http://www.kellyburger.com

Posted By: Desperado
Date Posted: 26 November 2007 at 11:39am
MikeK,
 
They should be spooled to the temp folder if you are trying to Virus Scan.  99.9% sure.
 
CORRECTION:
Actually ... with the "spool to disk" option, they may go to the queue folder.


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: LogSat
Date Posted: 26 November 2007 at 4:40pm
SpamFilter will spool temp message files in the SpamFilter\queue directory (and attachments in the SpamFilter\temp directory) regardless of the "SpoolQueueFilesToMemory" setting. This is done in case something happens while processing the email we have a backup on disk.

If the option
SpoolQueueFilesToMemory=1

is enabled, SpamFilter will also spool to RAM to increase performance, and will use the RAM copy for processing. Since it's using the RAM, it will ignore the file-based version.

This said, if you disable the spooling to RAM by setting:
SpoolQueueFilesToMemory=0

SpamFilter will rely on the file-based spool. If the antivirus deletes a file in the SpamFilter\queue directory (this is the one you want to monitor), then SpamFilter will assume there was a virus-related problem and will ignore the email.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: mikek
Date Posted: 27 November 2007 at 2:15am
thanks, roberto. as always, a fast and precise answer, exactly what I needed to know!

-------------
Mike Kellenberger
Work: http://www.escapenet.ch - http://www.escapenet.ch
Private: http://www.kellyburger.com - http://www.kellyburger.com


Print Page | Close Window