setting up antivirus

Best practice information from Scalix users relating to integration of Scalix with other products.

Moderator: ScalixSupport

ebhannes
Posts: 118
Joined: Fri Feb 22, 2008 9:51 am

setting up antivirus

Postby ebhannes » Wed Oct 08, 2008 10:02 am

Hi,

While there isn't any response of this thread:
http://www.scalix.de/forums/viewtopic.p ... 952ea10fff
im starting again to ask you, isn't there any possibility to get a notify about infected mails?

Situation now is really decend. I get a message from "Vscan Accout" with subject "VIRUS ALERT: Trojan.Agent-Saber4-1". this i had configured in clamd.conf.

ALL-ROUTES .VIR:
VIRUS-UNCLEANED=1 ACTION=REJECT NOTIFY="VIRUS FOUND AND DEFERED"
VIRUS-UNCLEANED=0 VIRUS-FOUND=1 ACTION=ALLOW NOTIFY="VIRUS FOUND AND CLEANED"

When i receive a message from vscan account i have to check var/log/mail and see, which file is or was infected, most of the time these files were deleted. Today an infected file was still under ~/data/00005t/ but of course it's not readable.
Anyway, you have no opportunity to find out anything about, nor it's possible to first send infected mails into quarantine and inspect them manually.
Has someone experience in using Trendmicro? McAfee is no alternative, because it's in use at the mailgateway and i want to use a different one at the internal scalix mailserver.
So please give me some details, hopefully i'm wrong in some configuration details.

Bye
Hannes

Return to “Third Party Integration”



Who is online

Users browsing this forum: No registered users and 2 guests