Scott,
We are using F-Prot and I have included my cfg file below. What
am I doing wrong?
#
# Declude Virus configuration file
#
CODE XXXXXXXXX
# The "####" in the LOGFILE option automatically gets replaced with the
month/date
LOGFILE C:\IMail\spool\vir####.log
LOGLEVEL LOW
CONSOLE OFF
# SCANFILE is the location of the command-line virus scanner. Note that
it
# must include the full path. VIRUSCODE is the code that scanner
returns if
# it finds a virus.
SCANFILE D:\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE
/NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
REPORT Infection
# VIRDIR is the directory to move E-mails with viruses; by default,
# it is set to 'virus' (\IMail\spool\virus).
VIRDIR D:\IMail\spool\virus
# The MAXATONCE option limits the number of AV processes. For example,
# MAXATONCE 1 will only allow 1 AV process to run at once (IE for
licensing
# purposes). A value of 0 (or commenting it out) allows unlimited
processes
# to run at the same time.
MAXATONCE 0
#
# The following options allow you to limit scanning to only incoming or
outgoing
# E-mail.
#
INCOMING ON
OUTGOING ON
#
# The ONACCESS option should be set to OFF unless you have an on-access
virus scanner
# that will be deleting attachments with viruses.
#
ONACCESS OFF
#
# The SCANNERTIMEOUT option lets you choose the number of seconds that
Declude will
# wait for the virus scanner to finish. The minimum value is 10
seconds. Most
# scanners will not need to take that long. This option is mainly to
prevent
# defective scanners (that never finish) from interfering with your
outgoing E-mail.
# Raising this will NOT help if your virus scanner always times out.
#
SCANNERTIMEOUT 60
#
# The SKIPEXT option will let you skip scanning of certain file
extensions. For
# example, a GIF file can't contain a virus, so there is no need to scan
it.
#
SKIPEXT GIF
SKIPEXT TXT
SKIPEXT JPG
SKIPEXT MPG
SKIPEXT PNG
#
# Declude Virus Pro v1.27 and higher allow you to pre-scan HTML files.
If no dangerous
# code is detected, the virus scanner will not get called. This can cut
down on CPU usage
# tremendously.
#
PRESCAN OFF
Regards,
____________________________
Christopher A. Melo
Internal Matters, Inc.
http://www.internalmatters.com
[EMAIL PROTECTED]
Tel. 401-739-3686
Fax. 508-448-0497
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Friday, November 09, 2001 12:13 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MISSING_REVERSE_DNS:Which of the eicar test
files should be blocked
>We just ran a test with the "Test eicar.com file [eicarinline]" and it
>was received. Should this file been blocked?
Yes, it should be caught (all the encoding methods used on that page
should
be caught).
That ones uses a ".zl6" extension, which may be the problem. If you are
using F-Prot, you need to have " /DUMB" on the SCANFILE line in the
virus.cfg file; if using McAfee, you should have " /ALL" on that
line. That will ensure that all files are scanned, regardless of the
extension.
If that doesn't take care of the problem, please let me know. Thanks.
-Scott
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
