Hola and Hello,

 

Question for the List on F-Secure installation and setup.  LSoft says in
http://www.lsoft.com/manuals/f-secure-faq.stm

 

1. What are the recommend FSAV settings for use with LISTSERV? 

 

For Windows:

 

1.                  Real Time protection enabled (mandatory)

2.                  Action:  "Delete Automatically" (strongly
recommended)

3.                  Scanning Options: "Files with these extensions"

4.                  Scan inside compressed files: "checked"

5.                  LISTSERV and/or LSMTP spool directories must be
exempted from scanning.

6.                  *.mail,  *.mai or *.job  files must be exempted from
scanning.  (Technically speaking, if you apply point 5, you should not
have to explicitly exempt any LISTSERV or LSMTP file types.)

7.                  We do not recommend (nor do F-Secure recommend) that
the "Scanning Options" box titled "All files" be checked.  This can lead
to serious performance degradation and is strongly discouraged.

 

 

Please note the text in bold print (numbers 5 and 6).  Thus far on our
server we have exempted the spool directories from real-time scanning,
have been very diligent about keeping the anti-virus program up to date
(we are on version 5.42 build 9480) and have the most current virus
signatures.  Yet lately I have setup a manual weekly scan that hits
every directory and file.  Real time protection normally catches quite a
few viruses per day trying to come through our Listserv server and thus,
we feel that the system is working and not spamming viruses out to our
users.  But my manual scans have been reporting viruses in the spool
directories.  This is alarming by a bit and I wanted to confirm that
these viruses are not slipping through the cracks of F-Secure somehow.
Why is it not recommended that we should scan the spool directory or
more specifically the *.mail, *.mai or *.job files?  The problem is I
can't tell if these files are coming in or going out.  When Real Time
snags a virus it generally finds it in the Listserv\TMP directory.  Is
this where Listserv temporarily parses the mail requests?  I am assuming
so.

 

Any insight would be greatly appreciated.  Thanks,

 

 

 

 

Jeff Lobaugh

CDC Information Technology Support Contract (CITS)

Business Computer Applications, CDC/ITSO

Network Specialist

Wk. (404) 639-7632

Fax. (404) 639-7848