Administrator's Guide - Kerio Software Archive

Chapter 17 Antivirus Control of Email And Attachment FilteringFigure 17.3Server responses to detection of a virus or a damaged/encrypted attachmentDiscard the messageThe message will be removed.Deliver the message with the attachment removedThe message will be delivered to the recipient but without the attachment. Instead,a server message will be attached saying that the attachment has been removed.Forward the message to the administrator addressThe message will be forwarded (intact — with possibly infected or forbidden attachment)to the email address specified. It is not important whether the address is local or remote.Forward the filtered message to administrator addressThe message without an infected or prohibited attachment will be (apart from the actionsselected below) forwarded to the specified email address as well. This can be used forverification of proper functionality of the antivirus and/or attachment filter.If an attachment cannot be scanned ...This section defines actions to be taken if one or multiple files attached to a messagecannot be scanned for any reason (e.g. password-protected archives). The followingactions can be taken:• Append a warning to the message — the message (or attachment) will be deliveredunchecked. The user will be warned that the message may still contain viruses.• Reject the message — the system will react the same way as when a virus was detected(i.e. the message will be delivered without any attachment or rejected). This option issafe, but sending password-protected archives is virtually impossible.Each message is evaluated first by an antispam system, then by antivirus. This saves computertime, since the antispam check is considerably less demanding than the antivirus check. If themessages marked as spam are set to be discarded automatically (in the Spam filter section),all spam messages containing viruses will be discarded as well.200