Previous Topic

Next Topic

Book Contents

Book Index

Advanced

advanced_advanced

Field

Description

Reject password protected files

The IceWarp Anti-Virus engine must unpack attachments to check them for a virus.

If an attached file is password protected then IceWarp Server cannot check the file contents.

By default, the message would be forwarded to the recipient.

This scenario could be exploited to get viruses into your system.

Check this option to categorize any messages containing password protected files as containing a virus.

NOTE: This option only applies to compressed files like ZIP and RAR files, not to files such as Word or Excel documents with password protection.

ALSO: This functionality could also be done using filters, giving you more control over the actions.

Thread pooling

The IceWarp Anti-Virus engine is multi-threading, this can sometimes cause problems on slower servers if the engine takes up too many resources, like 100% CPU.

Entering a non-zero value here limits the number of IceWarp Anti-Virus threads that will be run concurrently.

Maximum message size to proceed with antivirus

Enter a non-zero value to have IceWarp Anti-Virus processing bypassed for messages exceeding the given size.

NOTE: If you do not have message size generally restricted, this could be risky as bigger messages containing viruses would bypass processing too.

AntiVirus bypass file

Click the Edit button to edit a bypass file for the IceWarp Anti-Virus engine. This is a standard IceWarp Server bypass file. Examples of usage are given within the editor.

Messages from Email addresses, Domains, and IP ranges specified within this file will not be processed by the IceWarp Anti-Virus engine.

advanced_socks

Field

Description

Bypass extension types

Here you can define file (extension) types that are to be bypassed by antivirus engine.

Separate extensions by semicolons. Define extensions with dots (e. g. .jpg).

Size of data to hold in memory before using large files mode

There are two ways how to examine files:

  • The checked file is in a memory – this is faster for small files.
  • The checked file is saved to a disk and examined here (large files mode) – a huge file would block too big part of memory.

Define a large file size limit here.

Percentage of data size to send in large files mode (%)

Define a file size percentage that is examined before the examined file part is sent.

E. g. You define 50%, a half of a large file is examined and sent. Meanwhile, the second half of the file is examined (and sent consequently).

advanced_quarantine

Field

Description

Quarantine infected message to email/directory

Check this option to create an archive of infected messages.

Specify a fully qualified directory name where the messages will be stored, or an email address where the messages will be forwarded.

Quarantine infected messages

The whole message will be quarantined.

Quarantine only infected attachments

Only the infected attachments will be quarantined.

exclamation_mark_small

NOTE: This is NOT the same quarantine function as used by the AntiSpam engine.

action_notification

Field

Description

Administrator/Recipient/Sender

You can opt to send notification messages to a domain administrator(s), another recipient(s) and/or sender(s). Tick the appropriate one(s).

Customize

You can customize the message content and use IceWarp Server system variables within the message. Press the Customize button next to the recipient to open the message editor dialog.

"B" button

You can also define a bypass file for each recipient. Press the B button next to the recipient to define any bypass criteria you wish to impose. Examples are given within the editor (the Text File button).