User manual KASPERSKY ANTI-VIRUS 5.0 ADMINISTRATION GUIDE FOR LINUX FREE BSD AND OPENBSD MAIL SERVERS REV 09-2003

[. . . ] KASPERSKY LABS Kaspersky Anti-Virus® 5. 0 for Linux, FreeBSD and OpenBSD Mail Servers ADMINISTRATOR'S GUIDE KASPERSKY ANTI-VIRUS® 5. 0 FOR LINUX, FREEBSD AND OPENBSD MAIL SERVERS Administrator's guide Kaspersky Labs, Ltd. http://www. kaspersky. com Revision date: September, 2003 Contents CHAPTER 1. KASPERSKY ANTI-VIRUS®TM FOR LINUX, FREEBSD, AND OPENBSD MAIL SERVERS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What's new in version 5. 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] no Does the address belong to the group N?no Default group settings are applied to the message yes Group 1 settings are applied to the message yes Group N settings are applied to the message Figure 22. Mail message processing by the Keeper program 81 Kaspersky Anti-Virus for Unix Mail Servers 6. 1. 1. Forming user groups By default, the configuration file of Kaspersky Anti-Virus® has the group [smtpscan. group:default], which is true for all the server's senders and recipients. It contains the following mail message processing rules: · · · · Check all the messages. Deliver only clean and disinfected mail messages. Messages that fail to be disinfected, as well as suspicious, corrupted, or password-protected messages and those that fail to be scanned shall only be delivered to the group administrator. Notify the senders, the recipients, and the group administrator about infected, cleaned, suspicious, corrupted, and password-protected messages and those that fail to be scanned. · ® If you want Kaspersky Anti-Virus to process mail messages for different senders and recipients using individual rules, you will have to create groups. In order to create a new user group: 1. In the configuration [smtpscan. group:group_name]. file create section Define the addresses (address masks) of the recipients and senders included in the group. To do so, list them as the values of the parameters Senders and Recipients, separating by commas. POSIX regex standard is used when setting masks. When using two or more masks it is necessary to separate them with commas. If you do not define the value of either Recipients OR Senders parameter it will be automatically set as . *@. * If NEITHER Recipient mask, NOR Sender mask is defined, then no mail message will be processed using the rules of this group. You can use this mode when you wish to exclude some group from scanning without actually removing it from the group list. It can be added back by setting masks of senders' and recipients' addresses. or: Advanced settings 82 1. Create a new group urgent on the Groups list tab of the Webmin program (see Figure 10). Select the name of the group you have just created in the list of user groups and click the Properties button. 2. In the Sender mask and Recipient mask sections on the Main settings tab (see Figure 8) specify e-mail addresses or address masks of those senders and recipients whose mail messages are to be processed according to the group rules. 6. 1. 2. Message check and disinfection mode In order to check for viruses in the mail traffic of a certain group of senders/recipients the server's administrator must enable the appropriate mode in the group parameters. To do so, in the configuration file kav4mailservers. conf set Check=yes for the group, or if you set up the server remotely using the Webmin program, check the parameter Check this group on the Main settings tab (see Figure 8). When the Check mode is enabled, all the mail messages attributed to the group by the criterion of sender/recipient are scanned by Kaspersky Anti-Virus® for viruses. However, infected mail messages will not be cleaned. [. . . ] (i) Kaspersky Labs will provide you with the support services ("Support Services") as defined below for a period of one year on: (a) payment of its then current support charge; and (b) successful completion of the Support Services Subscription Form as provided to you with this Agreement or as available on the Kaspersky Labs website, which will require you to produce the Key Identification File which will have been provided to you by Kaspersky Labs with this Agreement. It shall be in the absolute discretion of Kaspersky Labs whether or not you have satisfied this condition for the provision of Support Services. (ii) Support Services will terminate unless renewed annually by payment of the then current annual support charge and by successful completion of the Support Services Subscription Form again. (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Labs Privacy Policy which is attached to this Agreement, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. [. . . ]