Kaspersky Lab kaspersky mail gateway 5.5 Mode D'Emploi
Anti-virus protection and spam filtration
49
5.3.2. Replacement of infected objects
with standard notifications
Task:
•
Scan for viruses all mail traffic on the server and cure infected
objects in email messages.
objects in email messages.
•
Objects, which cannot be cured, must be deleted and replaced
with a standard notification as well as suspicious, damaged or
password-protected objects.
with a standard notification as well as suspicious, damaged or
password-protected objects.
Solution: to perform the above task, do the following:
1. Enable the cure mode for infected objects. To do so, specify the
following parameter value in the [smtpgw.ave] section of the
configuration file:
configuration file:
Cure=true
2. Specify the following parameter values in the [smtpgw.policy]
section of the configuration file:
CheckAV=true
ActionDisinfected=cure
ActionInfected=placeholder
ActionSuspicious=placeholder
ActionProtected=placeholder
ActionError=placeholder
BlockMessage=
In addition to the replacement of infected and suspicious objects with
standard messages you can also set up the application to deliver to the
administrator notifications informing about detection of those objects
(see section 5.3.4 on p. 50) and save the messages containing those
objects in the quarantine directory (see section 5.3.6 on p. 52).
standard messages you can also set up the application to deliver to the
administrator notifications informing about detection of those objects
(see section 5.3.4 on p. 50) and save the messages containing those
objects in the quarantine directory (see section 5.3.6 on p. 52).
5.3.3. Blocking delivery for messages
containing suspicious objects
Task:
• Scan for viruses all mail traffic on the server and cure infected