Hey Bud!
Thanks a lot for your information. It is really helpful to me.
Scott, thanks to you also as it started from you. It seems the problem is
solved for me.
Thanks & Regards,
Yatin Shah
Business Development Executive
QualiSpace, A QuantumPages Enterprise
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tel No. +91 (22) 5592 1480
Fax No. +91 (22) 5592 1484
Mobile: +91 9323182676
Email: [EMAIL PROTECTED]
URL: http://www.qualispace.com
Support URL: http://my.qualispace.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bud Durland
Sent: Saturday, November 20, 2004 9:09 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] mails getting deleted
Yatin Shah @ QualiSpace wrote:
>Frankly speaking what will Declude Antivirus do? Asking this so that we can
>finalize. I mean is it some methodology difference between declude and
clam?
>
>
You need to understand some important key concepts. An on-access AV
scanner is an AV program that scans files for viruses whenever you
access them. If a virus is found, some action is usually taken -- move
/ delete/ clean / quarantine the file. IMail, like many e-mail servers,
stores all the messages for a particular mail box in a single file.
With iMail, these files are usually in the \IMAIL\USERS\<username> or
\IMAIL\<domain_name>\USERS\<username> folder. So, to use my server as
an example, C:\IMAIL\USERS\BUD\main.mbx contains all the messages in my
INBOX folder.
If an on-access scanner were to determine that there's a virus in that
file, it will quarantine the whole thing -- making all the messages in
my INBOX go away. If new messages come in, iMail will simply re-create
the main.mbx file. So when I look at it from web mail or my IMAP
client, I would only see the messages that came in since the last time
the virus scanner found a virus in my inbox (main.mbx)
Declude (and I presume MXGuard) work by using the command-line
anti-virus scanner on each individual e-mail message before it is added
to the user's inbox (at the SMTP level). That way, only the infected
message is stopped; the inbox remains intact. This is why, when you
install and configure your anti-virus solution, you need to tell it to
NOT do on-access scanning of the \IMAIL directory.
Now, if you have been running your IMail server for a while without
anti-virus protection, there's a pretty good chance that some of the
user message stores are infected with a virus. This is something that
neither Declude or MXGuard can fix. You have to either :
a) hope that everyone has up-to-date virus protection at the desktop, or
b) shutdown IMail and do a *one-time* virus scan of the IMail user
message stores, and have it move infected files to a quarantine
location. Once they are moved, use a plain text editor like Metapad or
UltraEdit to edit each mailstore. Find and remove the infected messages
(at that point, they are just plain text, so no infection danger if you
are careful). Put the edited files back in the message store area,
delete the .uid files, and scan again. Once you are clean, re-start
IMail. As you can see, this is a *very* tedious & time consuming process.
--
----------------------------------------------------------------
Bud Durland, CNE [EMAIL PROTECTED] fax: 518-561-0017
----------------------------------------------------------------
For sale: Parachute. Like new, used once. Small stain.
----------------------------------------------------------------
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
