GFI AVG Anti-Virus Updates for GFI MailSecurity, RNW, 1000-2999u, DEU AVGREN1000-2999 用户手册
产品代码
AVGREN1000-2999
60
GFI MailSecurity 2011
Configuring other mail filters
The file name only (including .txt extension). The log file will be stored in the following
default location:
<GFI MailSecurity installation path>\ContentSecurity\MailSecurity\Logs\<filename>.txt
9. Click Apply.
Check for recursive archives
Screenshot 43 - Configuring recursive archives options
This filter allows you to quarantine or delete emails that contain recursive archives.
Recursive archives, also known as nested archives, are archives that contain other/multiple
levels of sub-archives (that is, archives within archives). A high number of archive levels can
indicate a malicious archive. Recursive archives can be used in a DoS (Denial of Service)
attack, since most content scanning and anti-virus packages crash while attempting to scan
nested archive levels. To configure this filter:
Recursive archives, also known as nested archives, are archives that contain other/multiple
levels of sub-archives (that is, archives within archives). A high number of archive levels can
indicate a malicious archive. Recursive archives can be used in a DoS (Denial of Service)
attack, since most content scanning and anti-virus packages crash while attempting to scan
nested archive levels. To configure this filter:
1. Navigate to GFI MailSecurity
► Scanning & Filtering ► Decompression.
2. From the list of available filters, click Check for recursive archives.
3. To enable this filter select the Check for recursive archives checkbox.
4. Specify the maximum number of recurring archives in the Maximum number of
recurring archives text box. If an archive contains more recurring archives than the
specified number, the email is triggered as malicious.
recurring archives text box. If an archive contains more recurring archives than the
specified number, the email is triggered as malicious.
5. Specify what to do when an email contains an archive that triggers this filter:
Quarantine
Quarantines blocked emails
Automatically Delete
Deletes blocked emails