Chapter 6. Advanced Settings; Setting Up Antiviral Protection Of Mail Traffic - KAPERSKY ANTI-VIRUS 5.5 - FOR LINUX-FREEBSD MAIL SERVERS Administrator's Manual

CHAPTER 6. ADVANCED
SETTINGS
This section describes some advanced settings of Kaspersky Anti-Virus. Unlike
the required settings made during installation process (see Chapter 4 on page
20), without which the product cannot be used, advanced settings are used at
the administrator's discretion to extend the application's functionality and tailor it
to fulfill particular business needs.
Kaspersky Anti-Virus performs anti-virus scanning based on its settings in the
kav4mailservers.conf configuration file. You can edit the file.
6.1. Setting up antiviral protection
of mail traffic
When scanning mail traffic for viruses, the main criteria used to select rules for
processing mail messages are the sender's and the recipient's addresses, and
the parameters of the group they are part of. Therefore, it is of utmost importance
that the addresses are placed in the proper groups.
Whether or not a message belongs to a certain group is determined by the
presence of both the sender's and the recipient's address in that group. The
program looks through the group's address list and searches for both addresses.
When the combination of these two addresses (sender-recipient) is detected in
the group under analysis, the message is processed according to the rules for
this group.
The presence of a line with the address of a message in the group is checked
according to POSIX regex.
By default, the configuration file includes the [smtpscan.group:default] group,
which defines the rules of processing mail messages. Since the group initially
contains no names of senders or recipients, the rules described in it are applied
to all messages. You can change the parameters of the default group or create
new groups.
If other groups have been added to the configuration file (see section 6.1.1 on
page 50), the sequence of mail message processing will be as follows:
•
The program checks if the sender and recipient addresses belong to the
groups defined by the administrator. If the message addresses belong to
an existing group, this message will be processed according to the rules
of that group.