User manual KASPERSKY ANTI-VIRUS FOR FREEBSD/OPENBSD MAIL SERVERS

[. . . ] Protected server is MS Exchange Server 5. 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Protected server is MS Exchange Server 2000/2003. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Requirements for the computer from which Anti-Virus Engine will be controlled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Distribution Kit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Macros and Conditional Clauses Macros and conditional clauses can be used in the template text. Below you can find a full list of them in accordance with their location on the macros and conditional clauses bar. 3. 4. 8. 3. 1. You should keep to the following syntax when inserting macros into templates: %MACRO_NAME% e. g. , if you insert the following phrase when creating a template for an infected message: Attention!An infected message arrived from user %FROM%. When the Anti-Virus Engine component detects a virus in a message from a sender named "Ivanov", the user (or administrator, depending on anti-virus protection settings) will see the following alert in the first line of the received message: Attention!An infected message arrived from user Ivanov. Protection of MS Exchange Server Messages 67 from user %FROM. One should pay attention to syntax when using macros. For instance, if the end symbol % is omitted when using macro %FROM%, the user will see %FROM instead of the user's name: An infected message arrived The Non-conditional group contains two folders: Message and Anti-Virus. Message ­ contains a list of macros that allow the parameters related to the scanned message to be added to text. %DATABASE_NAME% Name of MS Exchange Server 2000 database in which the message has been detected. %SENT_REPRESENTING_NAME% Name displayed for message exchange user provided by the sender. %FROM% Displayed sender name. Attachment-name Submission time* Arrival time* Recipient names (Cc:):* Recipient names (To:): * MS Exchange database name* Server name Server Code page* Sender ­ claimed name:* Sender ­ name: * * All macros marked with "*" can be used under MS Exchange Server 2000/2003 only. 68 Kaspersky Anti-Virus 4. 5 for MS Exchange Server Macro name Macro and its meaning %FOLDER_NAME% Name of the folder in which the message was located during checkup. Conditional Clauses Conditional Clause <DISINFECTED> <ISWARNING> <DELETEDOBJ> <ENGINEFAILED> Meaning If the object has been disinfected. If the object could not be checked due to an error in the anti-virus program kernel. If the object could not be checked because it had been encrypted or password-protected or is part of an archive. <ISINFECTED> <QUARANTINED> <OBJECTUNKNOWN> 72 Kaspersky Anti-Virus 4. 5 for MS Exchange Server 3. 5. Testing the program After installing and adjusting Kaspersky Anti-Virus®, we recommend that you test the correctness of its settings and operation of the program using a test "virus" or its modifications. The test virus was specially designed by the organization (The European Institute for Computer Antivirus Research) for testing anti-virus products. The test "virus" IS NOT ACTUALLY A VIRUS because it does not contain code that can harm your computer. However, most anti-virus products identify this file as a virus Never use real viruses for testing the operation of an anti-virus product!You can download the test "virus" from the official website of the EICAR organization at http://www. eicar. org/anti_virus_test_file. htm. If you have no Internet connection, you can create your own test "virus". To create a test "virus", type the following string in any text editor and save the file as eicar. com: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TESTFILE!$H+H* The file downloaded from the EICAR website or created as described above contains the body of a standard test "virus". The anti-virus program will detect it, labsel it as Infected, fail to disinfect it, and apply the action defined by the administrator for handling similar objects. [. . . ] This licence authorizes you to make or download one copy of the Documentation for each additional copy authorized by the volume licence, provided that each such copy contains all of the Document's proprietary notices. This Agreement is effective for one (1) year unless and until earlier terminated as set forth herein. This Agreement will terminate automatically if you fail to comply with any of the conditions, limitations or other requirements described herein. Upon any termination or expiration of this Agreement, you must immediately destroy all copies of the Software and the Documentation. [. . . ]