hmLoadTopic({
hmKeywords:"AntiVirus,AntiVirus,AntiVirus Quarantine,AntiVirus virus scanning,AV,AV AntiVirus,MDaemon AntiVirus,Scanning for viruses",
hmTitle:"Virus Scanning",
hmDescription:"The options on this screen will only be available when using the optional MDaemon AntiVirus feature. Enabling MDaemon AntiVirus for the first time will start a 30-day trial.",
hmPrevLink:"cf_compression.html",
hmNextLink:"antivirus_updater.html",
hmParentLink:"cf_and_av.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; <a href=\"cf_and_av.html\">Content Filter and AntiVirus<\/a> &gt; AntiVirus",
hmTitlePath:"Security Menu > Content Filter and AntiVirus > AntiVirus > Virus Scanning",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Virus Scanning<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:31.2500rem;height:30.3125rem;border:none\" src=\".\/images\/content-filter_antivirus.png\"\/><\/p>\n\r<p style=\"margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><span style=\"font-family: Arial,Helvetica,sans-serif; color: #000000;\">&nbsp;<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">The options on this screen will only be available when using the optional <a href=\"antivirus.html\" class=\"topiclink\">MDaemon AntiVirus<\/a> feature. Enabling MDaemon AntiVirus for the first time will start a 30-day trial. If you wish to purchase this feature, contact your authorized MDaemon reseller or visit:<\/span><span class=\"f_Notes\"> <a href=\"https:\/\/mdaemon.com\/pages\/mdaemon-email-antivirus-antispam\" target=\"_blank\" class=\"weblink\">mdaemon.com<\/a>.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Enable AntiVirus scanning<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox to enable AntiVirus scanning of messages. When MDaemon receives a message with attachments, it will scan them for viruses before delivering the message to its final destination.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Exclude gateways from AntiVirus scanning<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you want messages bound for one of MDaemon<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_ControlIndent\">s domain gateways to be excluded from virus scanning. This may be desirable for those who wish to leave the scanning of those messages to the domain<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_ControlIndent\">s own mail server. For more information on domain gateways, see <a href=\"gateway_domain_gateways.html\" class=\"topiclink\">Gateway Manager<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Configure Exclusions<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click the Configure Exclusions button to specify recipient addresses to exclude from virus scanning. Messages bound for these addresses will not be scanned for viruses. Wildcards are allowed in these addresses. You could therefore use this feature to exclude entire domains or specific mailboxes across all domains. For example, &quot;*@example.com or &quot;VirusArchive@*&quot;.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Exclude Trusted IPs from AntiVirus scanning<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to exempt messages from AntiVirus scanning when coming from one of your <a href=\"security--trusted_ips.html\" class=\"topiclink\">Trusted IP addresses<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Refuse to accept messages that are infected with viruses<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this option is you wish to scan incoming messages for viruses during the SMTP session rather than after the session is concluded, and then reject those messages found to contain viruses. Because each incoming message is scanned before MDaemon officially accepts the message and concludes the session, the sending server is still responsible for it—the message hasn\'t technically been delivered yet. Thus the message can be rejected outright when a virus is found. Further, because the message was rejected, no further AntiVirus related actions listed on this dialog will be taken. No quarantine or cleaning procedures will be taken, and no notification messages will be sent. This can greatly reduce the number of infected messages and virus notification messages that you and your users receive.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">The SMTP-(in) log will show the result of AV processing. The possible results you might see are:<\/span><\/p>\n\r<p class=\"p_List12\" style=\"text-indent: 0; padding-left: 1.0000rem; margin-left: 3.7500rem;\"><span class=\"f_List12\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.0000rem;margin-left:-1.0000rem\">&#8226;<\/span><span class=\"f_List12\">the message was scanned and found infected with a virus<\/span><\/p>\n\r<p class=\"p_List12\" style=\"text-indent: 0; padding-left: 1.0000rem; margin-left: 3.7500rem;\"><span class=\"f_List12\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.0000rem;margin-left:-1.0000rem\">&#8226;<\/span><span class=\"f_List12\">the message was scanned and no virus was found<\/span><\/p>\n\r<p class=\"p_List12\" style=\"text-indent: 0; padding-left: 1.0000rem; margin-left: 3.7500rem;\"><span class=\"f_List12\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.0000rem;margin-left:-1.0000rem\">&#8226;<\/span><span class=\"f_List12\">the message could not be scanned (usually because a ZIP or other type or attachment could not be opened\/accessed)<\/span><\/p>\n\r<p class=\"p_List12\" style=\"text-indent: 0; padding-left: 1.0000rem; margin-left: 3.7500rem;\"><span class=\"f_List12\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.0000rem;margin-left:-1.0000rem\">&#8226;<\/span><span class=\"f_List12\">the message could not be scanned (it exceeds the max size limit)<\/span><\/p>\n\r<p class=\"p_List12_LastItem\" style=\"text-indent: 0; padding-left: 1.0000rem; margin-left: 3.7500rem;\"><span class=\"f_List12\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.0000rem;margin-left:-1.0000rem\">&#8226;<\/span><span class=\"f_List12_LastItem\">an error occurred during the scan<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">When viruses are detected...<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click one of the options in this section to designate the action that MDaemon will take when AntiVirus detects a virus.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...do nothing (use content filter to handle)<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option if you wish to take none of the above actions, and have set up content filter rules to take some alternative actions instead.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...delete the entire message<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This option will delete the entire message rather than just the attachment when a virus is found. Because this deletes the whole message, the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">Add a warning...<\/span><span class=\"f_ControlIndent2\">&quot; option doesn\'t apply. However, you can still send a notification message to the recipient by using the controls on the Notifications tab.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...quarantine the entire message to...<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This option is like the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">Delete the entire message<\/span><span class=\"f_ControlIndent2\">&quot; option above, but the message will be quarantined in the specified location rather than deleted.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...delete the infected attachment<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This option will delete the infected attachment. The message will still be delivered to the recipient but without the infected attachment. You can use the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">Add a warning...<\/span><span class=\"f_ControlIndent2\">&quot; control on the bottom of this dialog to add text to the message informing the user that an infected attachment was deleted.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...quarantine the infected attachment to...<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option and specify a location in the space provided if you want infected attachments to be quarantined to that location rather than deleted or cleaned. Like the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">Delete the infected attachment<\/span><span class=\"f_ControlIndent2\">&quot; option, the message will still be delivered to the recipient but without the infected attachment.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">...clean the infected attachment<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">When this option is chosen, AntiVirus will attempt to clean (i.e. disable) the infected attachment. If the attachment cannot be cleaned, it will be deleted.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Quarantine messages that cannot be scanned<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is enabled, MDaemon will quarantine any messages it is unable to scan, such as some containing password-protected files.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Allow password-protected files in exclusion list...<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Use this option if you wish to allow a message with a password-protected, non-scannable file to pass through the AntiVirus scanner if the file name or type is in the exclusion list.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Configure Exclusions<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to open and manage the file exclusion list. File name and types included on this list will not be scanned.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Add warning to top of message body if infected<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When one of the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">...attachment<\/span><span class=\"f_ControlIndent\">&quot; options is chosen above, click this option if you want to add some warning text to the top of the previously infected message before it is delivered to the recipient. Thus you can inform the recipient that the attachment was stripped and why.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Warning message...<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to display the warning text that will be added to messages when the &quot;<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">Add a warning message...<\/span><span class=\"f_ControlIndent2\">&quot; feature is used. After making any desired changes to the text, click <\/span><span class=\"f_ControlIndent2\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_ControlIndent2\"> to close the dialog and save the changes.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Add warning to top of message body if not scanned<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is enabled, MDaemon will add some warning text to the top of any message it is unable to scan.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Warning message...<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to display the warning text that will be added to messages that cannot be scanned. After making any desired changes to the text, click <\/span><span class=\"f_ControlIndent2\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_ControlIndent2\"> to close the dialog and save the changes.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Scan all mailboxes every <\/span><span class=\"f_ControlHeading\" style=\"font-style: italic;\">n<\/span><span class=\"f_ControlHeading\"> day(s)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box if you wish to scan all stored messages periodically, to detect any infected message that may have passed through the system before a virus definition update was available to catch it. Infected messages will be moved to the quarantine folder and have the <\/span><span class=\"f_PlainText\">X-MDBadQueue-Reason<\/span><span class=\"f_ControlIndent\"> header added, so that you can see an explanation when viewed in MDaemon. Messages that cannot be scanned will not be quarantined. <\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Configure mailbox scan<\/span><span class=\"f_ControlIndent\">.<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to specify how often you wish to scan the mailboxes and whether you wish to scan all message or only those that are less than a certain number of days old. You can also manually run a mailbox scan immediately.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Virus Scanning Engines<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">MDaemon AntiVirus is equipped with two virus scanning engines: ClamAV and IKARUS Anti-Virus. When both are enabled, messages will be scanned by both engines; first by IKARUS Anti-Virus and then by ClamAV. This provides an extra layer of protection, since a virus could potentially be identified by one engine before the virus definitions of the other engine have been updated.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Use the ClamAV engine to scan messages<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to use the ClamAV engine to scan messages for viruses.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Configure<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to access an option to activate debug logging for ClamAV. The log file will be located in MDaemon\'s log folder.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Use the IKARUS Anti-Virus engine to scan messages<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to use the IKARUS Anti-virus engine to scan messages for viruses.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Configure<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Use this option if you wish to start and stop the IKARUS server automatically whenever MDaemon starts or shuts down.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"antivirus_updater.html\" class=\"topiclink\">AV Updater<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"cf_and_av.html\" class=\"topiclink\">Content Filter and AntiVirus<\/a><\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">&nbsp;<\/span><\/p>\n\r"
})
