Chapter 6. Advanced Settings; Setting Up Antiviral Protection Of Mail Traffic - KAPERSKY ANTI-VIRUS 5.0 - FOR LINUX FREEBSD-OPENBSD MAIL SERVER Administrator's Manual

CHAPTER 6. ADVANCED
SETTINGS
In this section we shall consider advanced settings of Kaspersky Anti-Virus
functions. Unlike the required settings (see Chapter 4 on page 31), without which
the product cannot be used, advanced settings are made as administrator's
options. They can help to extend the product's functionality and set it up for
certain business specifics.
6.1. Setting up antiviral protection
of mail traffic
When scanning mail traffic for viruses, the main criteria used to select rules for
processing of each mail message are the sender's and the recipient's addresses
and the parameters of the group they are part of. Therefore, it is of utmost
importance that the addresses are placed in the proper groups.
Whether or not a message belongs to a certain group is determined by the
presence of both the sender's and the recipient's address in this group. The
program looks through the address list of the group and searches for both
addresses. As soon as the combination of these two addresses (sender-
recipient) is detected in the group under analysis, the message is processed
according to the rules set by the parameters for this group.
Kaspersky Anti-Virus
settings specified in the configuration file kav4mailservers.conf. This file
can be edited either locally or remotely using the Webmin program.
The presence of a line with the address of a message in the group is
checked according to POSIX regex (for more details about the standard
refer to man 7 regex).
By default, the configuration file includes the group [smtpscan.group:default],
which defines the rules of processing mail messages. Since the group initially
contains no names of senders or recipients, the rules described in it are applied
to all the messages. You can change the parameters of the default group or
create new groups.
If you have entered other groups in the configuration file (see section 6.1.1 on
page 81), then the sequence of mail message processing will be as follows:
®
carries out anti-virus filtering according to the
®