User manual KASPERSKY ANTI-VIRUS 5.5 ADMINISTRATION GUIDE FOR LINUX AND FREE BSD MAIL SERVERS REV 07-2007

[. . . ] Kaspersky Anti-Virus® 5. 5 for Linux and FreeBSD Mail Servers KASPERSKY LAB ADMINISTRATOR'S GUIDE KASPERSKY ANTI-VIRUS® 5. 5 FOR LINUX AND FREEBSD MAIL SERVERS Administrator's guide © Kaspersky Lab, Ltd. http://www. kaspersky. com Revision date: July 2007 Contents CHAPTER 1. KASPERSKY ANTI-VIRUS 5. 5 FOR LINUX AND FREEBSD MAIL SERVERS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What's new in version 5. 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Kaspersky Anti-Virus performs anti-virus scanning based on its settings in the kav4mailservers. conf configuration file. Setting up antiviral protection of mail traffic When scanning mail traffic for viruses, the main criteria used to select rules for processing mail messages are the sender's and the recipient's addresses, and the parameters of the group they are part of. Therefore, it is of utmost importance that the addresses are placed in the proper groups. Whether or not a message belongs to a certain group is determined by the presence of both the sender's and the recipient's address in that group. The program looks through the group's address list and searches for both addresses. When the combination of these two addresses (sender-recipient) is detected in the group under analysis, the message is processed according to the rules for this group. The presence of a line with the address of a message in the group is checked according to POSIX regex. By default, the configuration file includes the [smtpscan. group:default] group, which defines the rules of processing mail messages. Since the group initially contains no names of senders or recipients, the rules described in it are applied to all messages. You can change the parameters of the default group or create new groups. If other groups have been added to the configuration file (see section 6. 1. 1 on page 50), the sequence of mail message processing will be as follows: · The program checks if the sender and recipient addresses belong to the groups defined by the administrator. If the message addresses belong to an existing group, this message will be processed according to the rules of that group. 50 Kaspersky Anti-Virus 5. 5 for Linux and FreeBSD Mail Servers · If the addresses of the sender and the recipient of the processed message fall into several groups, the program will use the parameters of the first one. If these addresses are not part of any address group defined by the administrator, then the message will be processed according to the rules specified in the default group. · Figure 4. Forming user groups By default, the configuration file of Kaspersky Anti-Virus contains the [smtpscan. group:default] group including all the server's senders and recipients. It uses the following rules for mail message processing: · · Check all messages. Clean all infected files that are detected. Advanced settings 51 · · Deliver only clean and disinfected mail messages. Messages that fail to be disinfected, as well as suspicious, corrupted, or password-protected messages and those that cannot be scanned shall only be delivered to the group administrator. Notify the senders, the recipients, and the group administrator about infected, cleaned, suspicious, corrupted, and password-protected messages and those that cannot be scanned. · If you want Kaspersky Anti-Virus to process mail messages for different senders and recipients using different rules, you will have to create groups for them. file create section Define the addresses, or address masks, of the recipients and senders to be included in the group. To do so, list them as the values of the Senders and Recipients parameters, delimited by commas. If you do not define the value of either Recipients OR Senders parameter it will be automatically set as . *@. * (all addresses). In version 5. 5 of Kaspersky Anti-Virus the kavadministrators group has been introduced into the configuration file. [. . . ] Upon any termination or expiration of this Agreement, you must immediately destroy all copies of the Software and the Documentation. You may terminate this Agreement at any point by destroying all copies of the Software and the Documentation. (i) Kaspersky Lab will provide you with the support services ("Support Services") as defined below for a period of one year following: (a) Payment of its then current support charge, and: (b) Successful completion of the Support Services Subscription Form as provided to you with this Agreement or as available on the Kaspersky Lab website, which will require you to produce the Key Identification File which will have been provided to you by Kaspersky Lab with this Agreement. It shall be at the absolute discretion of Kaspersky Lab whether or not you have satisfied this condition for the provision of Support Services. [. . . ]