27
To accomplish the whole procedure, one has to restart the MTA Qmail.
4.4. Alternative methods of content ltering
Although mechanisms described in previous sections are concerned to be the basic mechanisms of the e-mail
messages scanning, there exists yet other possibilities that are all described in this section.
4.4.1. Scanning e-mail messages using AMaViS
AMaViS - A Mail Virus Scanner is a tool that interfaces your MTA and several anti-virus scanners. It supports Sendmail,
QMail, Postx, Exim and comes in three branches:
amavis
for low/medium mail volume
amavisd
for higher mail volume, daemonized version of amavis
amavisd-new
for higher mail volume, Anti-Spam, ISP features, ...
Amavis cooperates with the anti-virus by using its command line interface nod32cli (see the nod32cli(1) manual
page for details). Yet before we go into detailed explanation of the Amavis congurations, we would like to discuss the
impact of the method on the anti-virus software functionality.
First, note that Amavis does not allow modication of the body of scanned e-mail messages directly by anti-virus
software. Particularly, no infected e-mail message processed and delivered to the nal recipient will be cleaned directly
by anti-virus software. Second consequence is that no NOD32 footnote will be written into the e-mail body. Another
feature of the described method is that the modication of e-mail header is indirect from the point of view of the
antivirus software. Particularly, status dependent, header modication directly by the anti-virus is disabled. Taking into
account the above statements we recommend the use of Amavis conguration (described in the next sections) only in
case the above discussed features of the product are not requested by the user.
4.4.1.1. amavis
Conguration of Amavis is performed during the process of Amavis installation. For installation, rst unpack the
source amavis-0.x.y.tgz and overwrite the le amavis/av/nod32cli with this contents:
#
#ESETSoftwareNOD32CommandLineInterface,Version2.52
#
if($nod32cli){
do_log(2,“Using$nod32cli“);
chop($output=‘$nod32cli--subdir$TEMPDIR/parts‘);
$errval=retcode($?);
do_log(2,$output);
if($errval==0){#noerrors,novirusesfound
$scanner_errors=0;
}elsif($errval==1||$errval==2){
#noerrors,virusesdiscovered
$scanner_errors=0;
chapter 4 / Integration with E-mail Messaging System