ESET MAIL SECURITY, Installation Manual

Page: 22 / 42

22
ESET Mail Security
6.1. Handle Object Policy
The Handle Object Policy (see Figure 6-1) is a mechanism that provides handling of the
scanned objects based on their scanning status. This functionality is based on the following
configuration options: ‘action_av‘, ‘action_av_infected‘, ‘action_av_notscanned‘, ‘action_av_
deleted‘, ‘action_as_spam‘, ‘action_as_notscanned‘. For detailed information on these options,
please refer to the esets.cfg (5) man page.
Figure 6-1. Scheme of Handle Object Policy mechanism.
Every object processed is first handled according to the configuration of the ‘action_av‘
option. If this option is set to ‘accept‘ (or ‘defer‘, ‘discard‘, ‘reject‘) the object is accepted (or deferred,
discarded, rejected). If the option is set to ‘scan‘ the object is scanned for virus infiltrations, and if
the ‘av_clean_mode‘ option is set to ‘yes‘, the object is also cleaned. In addition, the configuration
options ‘action_av_infected‘, ‘action_av_notscanned‘ and ‘action_av_deleted‘ are taken into
account to further evaluate handling of the object. If an ‘accept‘ action has been taken as a result
of these three action options, the object is accepted. Otherwise, the object is blocked.
Note that an object is scanned for spam only if the configuration option ‘action_as‘ is set to
‘scan‘. In this case, the action configuration options ‘action_as_spam‘ and ‘action_as_notscanned‘
are taken into account. If the option is set to ‘accept‘ (or ‘defer‘, ‘discard‘, ‘reject‘) as a result of the
two above action options, the object is accepted for further delivery (or the object is deferred,
discarded or rejected).
NOTE: Some modules have been written to integrate ESETS into an environment which does not allow scanned objects to be
modified. Thus the modification of scanned objects is disabled in such modules and the value of the configuration option av_
clean_mode is ignored. For detailed information on this topic refer to the relevant modules‘ man pages.
accept defer, discard, reject
action_av
object not accepted
accept defer, discard, reject
action_av_infected
action_av_notscanned
action_av_deleted
object not accepted
object accepted
accept defer, discard, reject
action_as
object not accepted
scan
action_as_notscanned
accept defer, discard, reject
object not accepted
scan