Additional setup
41
Error
– The message (or part of it) is corrupted and an error occurred while
scanning it.
Protected
– The message (or part of it) is protected with a password or
other means of protection. Therefore, it was skipped for anti-virus
scanning.
Infected
– The message (or part of it) contains malicious code (code sample
is available in the anti-virus database or it was detected by the heuristic
code analyzer).
If disinfection of an infected object has failed, the object is assigned the
CureFailed
status.
Depending on the message status, the application applies an appropriate action
to this message.
6.7. Assigning actions for objects
The following stage of anti-virus protection entails handling messages according
to their scan status (see section 6.5 on page 41).
Select one of the following actions to be applied to infected messages:
warn
– Replace the infected message with a notification that this object
contains a virus.
cure
– Disinfect the infected object in the message. If disinfection fails,
delete the object and add the corresponding notification to the
message.
drop
– Accept the message but do not deliver it to the recipient. The
application will delete the infected message.
reject
– Reject the message and return the corresponding error message to
the sender.
skip
– Deliver the message to the recipient without treatment.
delete
– Delete the infected object and add the corresponding notification to
the message.
The action to be applied to infected objects is defined by the
DefaultAction
parameter in the
[kavmilter.action]
section. By default, the application tries to
disinfect all infected messages or their objects.
As actions to be applied to protected or encrypted messages, select
skip
or
delete
.
For messages that generated a scan error, select
warn
,
skip
, or
delete
.
The
warn
,
cure
, and
delete
options involve creating a notification that replaces
the infected object. The notification describes actions applied to the object. By
