User manual KASPERSKY ANTI-VIRUS FOR WINDOWS SERVER ENTERPRISE EDITION ADMINISTRATOR'S GUIDE

[. . . ] Licensing policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Distribution kit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Help desk for registered users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Therefore, it is of utmost importance that the addresses are placed in the proper groups. Whether or not a message belongs to a certain group is determined by the presence of both the sender's and the recipient's address in this group. The program looks through the address list of the group and searches for both addresses. As soon as the combination of these two addresses (senderrecipient) is detected in the group under analysis, the message is processed according to the rules set by the parameters for this group. ® Kaspersky Anti-Virus carries out anti-virus filtering according to the settings specified in the configuration file kav4mailservers. conf. This file can be edited either locally or remotely using the Webmin program. The presence of a line with the address of a message in the group is checked according to POSIX regex (for more details about the standard refer to man 7 regex). By default, the configuration file includes the group [smtpscan. group:default], which defines the rules of processing mail messages. Since the group initially contains no names of senders or recipients, the rules described in it are applied to all the messages. You can change the parameters of the default group or create new groups. If you have entered other groups in the configuration file (see section 6. 1. 1 on page 81), then the sequence of mail message processing will be as follows: Advanced settings 80 1. The program checks if the message addresses belong to the groups defined by the administrator. If the message addresses belong to any user address group, then this message will be processed according to the rules set by the parameters of this group. If the addresses of the sender and the recipient of the processed message fall into several groups, the program will use the parameters of the first one. However, infected mail messages will not be cleaned. To ENABLE THE REPAIR MODE for infected messages it is necessary to specify in the group at least one parameter for the disinfected (Cured) objects. For example, if along with other parameters in the group you specify: [smtpscan. group:account] Check=yes CuredRecipientNotify=yes it means that: · · · All the mail messages for senders/recipients included in the account group will be checked for viruses. Any infected objects that are detected will be cleaned. The recipients will receive appropriate notifications regarding the disinfected objects. In order to enable the Repair mode for infected objects remotely: 83 Kaspersky Anti-Virus for Unix Mail Servers On the Notify list tab (see Figure 15) place at least one check mark for the Cured object type or select the required value in the drop-down list in the Action column. 6. 1. 3. Actions taken with mail messages The following two factors determine what actions shall be taken with mail messages: · · Object status assigned after scanning (see section 6. 2. 2 on page 89). The action set for a certain object status in the configuration file. An object is assigned its status by the aveserver process immediately after it is scanned for viruses. The action to be applied to the object after scanning is set by the server's administrator. Kaspersky Anti-Virus® allows defining actions to be taken to mail message objects that are delivered to the recipients and the group administrator. For message senders, ONLY notification can be set. You can set one of the following actions for mail message objects: Remove ­ Remove object from the message. [. . . ] This Agreement is effective for one (1) year unless and until earlier terminated as set forth herein. This Agreement will terminate automatically if you fail to comply with any of the conditions, limitations or other requirements described herein. Upon any termination or expiration of this Agreement, you must immediately destroy all copies of the Software and the Documentation. You may terminate this Agreement at any point by destroying all copies of the Software and the Documentation. [. . . ]