RE: Help Zaxalon!!

[Zaxalon Webmaster]

Yes, this is more or less what takes place, although simplified.  SCSMfilter will take various actions based upon the exit code it is provided, up to and including deleting a message.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woodie Sayles Sent: Thursday, November 04, 2004 9:33 PM To: imsusers@rockliffe.com Subject: RE: Help Zaxalon!!   If AVP is set to delete an infected message, are you saying that it just passes that code to SCSMfilter and SCSMfilter deletes the message? I'm a bit confused about how that all works now. Could you give me the step-by-step procedure for when an infected email comes in through SMTPRcv. Is the following correct?   1. Infected email comes in through SMTPRcv and is put in Prein. 2. SCSMfilter takes it and passes it off to AVP, who passes it to EZ Antivirus. 3. EZ Antivirus scans it and passes back the code for infected (either 64 or 32 from what I can tell). 4. AVP takes the code and gives it to SCSMfilter. 5. SCSMfilter deletes it???   I really would like to get this fixed because I hadn't checked the server for an hour and there were 49 infected emails in the Trash folder. Unfortunately, there were two good emails, so I can't just delete everything that's in Trash. Woodie Sayles [EMAIL PROTECTED]  Webfoot.Net 2030 Main Street Dunedin, FL  34698 (727) 442-5770 (727) 442-3380 - fax Fast, friendly, professional web design and hosting. Visit our web site at http://www.webfoot.net to see what we can do for you!     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Zaxalon Webmaster Sent: Wednesday, November 03, 2004 1:43 AM To: imsusers@rockliffe.com Subject: FW: Help Zaxalon!! AVP only returns a code to SCSMfilter to tell that program the disposition of an e-mail message, it does not actually move it itself.  If it encounters a serious error that would cause it to de-activate, it will trash the message for safety and/or analysis, regardless of your infected message disposition setting, as it isn’t clear this message was infected.   You can run AVP on a message from the command line with “AVP <msgfile> <rcpfile>”.  If you set HKLM\Software\Zaxalon\AVP\DevEnviron, type REG_SZ, to value “1”, before running this from the command line, AVP will popup its disposition of the message in a message box rather than return a DOS exit code.  This registry key value must be set back to zero, or deleted, for AVP to work as a filter… don’t have SCSMfilter running while you have DevEnviron set to 1.   I would suspect that your engine isn’t returning an “infected” nor “clean” exit code per your engine tab settings setup, however I’m not using the newest EZ Antivirus, so I can not answer this for sure.   Hope this helps.   -- Eric   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woodie Sayles Sent: Tuesday, November 02, 2004 4:59 PM To: imsusers@rockliffe.com Subject: Help Zaxalon!!   Any idea why all the infected messages would be put in the Trash folder, rather than being deleted like I've specified in the setup of AVP? This started happening with the new version of EZ Antivirus.   The other strange thing is that even if I specify a different Trash folder (i.e., TrashAVP), it still puts the messages in the Trash folder, not in the new TrashAVP folder. It's like AVP isn't looking at the configuration for some reason.   Woodie Sayles [EMAIL PROTECTED]  Webfoot.Net 2030 Main Street Dunedin, FL  34698 (727) 442-5770 (727) 442-3380 - fax Fast, friendly, professional web design and hosting. Visit our web site at http://www.webfoot.net to see what we can do for you!