Yatin Shah @ QualiSpace wrote:
Frankly speaking what will Declude Antivirus do? Asking this so that we can
finalize. I mean is it some methodology difference between declude and clam?
You need to understand some important key concepts. An on-access AV scanner is an AV program that scans files for viruses whenever you access them. If a virus is found, some action is usually taken -- move / delete/ clean / quarantine the file. IMail, like many e-mail servers, stores all the messages for a particular mail box in a single file. With iMail, these files are usually in the \IMAIL\USERS\<username> or \IMAIL\<domain_name>\USERS\<username> folder. So, to use my server as an example, C:\IMAIL\USERS\BUD\main.mbx contains all the messages in my INBOX folder.
If an on-access scanner were to determine that there's a virus in that file, it will quarantine the whole thing -- making all the messages in my INBOX go away. If new messages come in, iMail will simply re-create the main.mbx file. So when I look at it from web mail or my IMAP client, I would only see the messages that came in since the last time the virus scanner found a virus in my inbox (main.mbx)
Declude (and I presume MXGuard) work by using the command-line anti-virus scanner on each individual e-mail message before it is added to the user's inbox (at the SMTP level). That way, only the infected message is stopped; the inbox remains intact. This is why, when you install and configure your anti-virus solution, you need to tell it to NOT do on-access scanning of the \IMAIL directory.
Now, if you have been running your IMail server for a while without anti-virus protection, there's a pretty good chance that some of the user message stores are infected with a virus. This is something that neither Declude or MXGuard can fix. You have to either :
a) hope that everyone has up-to-date virus protection at the desktop, or
b) shutdown IMail and do a *one-time* virus scan of the IMail user message stores, and have it move infected files to a quarantine location. Once they are moved, use a plain text editor like Metapad or UltraEdit to edit each mailstore. Find and remove the infected messages (at that point, they are just plain text, so no infection danger if you are careful). Put the edited files back in the message store area, delete the .uid files, and scan again. Once you are clean, re-start IMail. As you can see, this is a *very* tedious & time consuming process.
-- ---------------------------------------------------------------- Bud Durland, CNE [EMAIL PROTECTED] fax: 518-561-0017 ---------------------------------------------------------------- For sale: Parachute. Like new, used once. Small stain. ----------------------------------------------------------------
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
