On Saturday, November 06, 2004 at 9:22:01 AM [GMT -0500], Thomas Fernandez wrote:
> I am using PC-Cillin and TB. > Problem 1: There is no plug-in. This means that every time a virus > comes, the email will not be imported into TB, as the initial bat*.tmp > file will be arrested by the PCC realtime scan, and the infected mail > will be downloaded each time again (and the *.tmp file arrested so the > mail cannot be imported into TB) until I delete it manually from the > server. There probably is a way to exclude *.tmp files from scanning, > but what then is the purpose? It's not all the time that real-time scanning and locking of files is a good thing. This is why decent AV programs will support the exclusion of objects, filetypes and directories from realtime scanning. You can safely prevent the scanning of TB! temp files since the virus will be caught later. > The infected mails will still be imported into TB, but now PCC will > arrest the whole folder when I try to open it! In this case, I'd exclude the TB! directory from realtime scanning. I have done so here, even though I'm yet to experience that horrid effect. > Had some funny "disappearing all mails in a folder" issues over that a > few years back. So I decided to disable the realtime scan, and I > manually scan any suspicious attachments before I open them. Couldn't you just exclude the TB! installation and mail directories from scanning as well as the bat tmp files? There's really nothing else to exclude. > Problem 2: PCC (since it has no plug-in for TB) will not be able to > scan mails that come in via secured connection. So the infected mails > will be received by TB anyway. Again, no point. This is assuming you use an encrypted connection. If you don't, then excluding the temp files and the TB! directory from realtime scanning, as well as enabling mail scanning should prevent the locking of temp files and entire mailbases while checking mail as they come in. I assume PCCillin has a mailscanner. I'm also assuming PC-Cillin allows file and directory exlusions from realtime and manual scans. If PC-Cillin doesn't allow this flexibility, then I'd certainly not recommend it as a solution. There are too many decent scanners out there to choose from and which all allow that flexibility. > At home, I am comfortable with scanning attachments manually. Most > malware can be identified by sight anyway. In the office, the AV scan > is server-side. That's much better, IMHO. Manual scanning can be tedious, but we get accustomed to a lot. Afterall, some find having to worry about viruses at all to be rather tedious. :) -- -= Allie =- ..... Fraud(n): A telephone number starting with 1-900 __________________________________________________ Using The Bat!� v3.0.2.5 for IMAP mail IMAP Server: MDaemon Pro | OS: Windows XP Pro (Service Pack 2) ________________________________________________ Current version is 3.0.1.33 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
