Configuration
42
Avira AntiVir UNIX Server
Avira GmbH
•
Delete the file
•
Move the file to a quarantine directory
The values for this option are
nothing
(default),
delete
and
quarantine
.
concerning file action = quarantine
quarantine
directory,
quarantine
prefix
Quarantine directory and prefix:
If you activate the option to move concerning files to quarantine, when a virus or
unwanted program is detected, you can now specify the directory for the quarantine and
the prefix to apply to file names. You have to adapt the settings to your system
requirements. If the moving reaction fails, the concerning files are deleted by the bulk
memory.
quarantine directory = /tmp
quarantine prefix = vir-
max lru files
entries, lru file
entry lifetime
Recently scanned files:
samba-vscan creates a list with the recently scanned files to ensure a fast reaction to
successive file access and to save scan resources. With these settings you can configure
the memory for the last recently used (LRU) files. Default: 100 entries, for up to 5
seconds.
max lru files entries = 100
lru file entry lifetime = 5
exclude file
types
Excluding files from scanning:
samba-vscan can exclude certain file types from scanning, classifying the files by the
MIME type. You should use this option with great care!
By default the list is empty, so there are no excluded file types.
exclude file types =
antivir program
name
Path for AntiVir program:
The VFS Plug-in serves as an interface between Samba and the Scan Service. The "antivir"
program has been integrated for the AntiVir Scanner. This option tells the plug-in where
to find the "antivir" program. Default:
antivir program name = /usr/lib/AntiVir/antivir
options for
archives
Checking archives:
AntiVir Samba Scanner is also able to scan within archives if the option
antivir scan
in archive
is set to
yes
. However, there are limits and archives are skipped when
they exceed these parameters (maximum compression ratio, maximum contents size,
Please note that the term "infected" is incorrect when used for other
unwanted software detected as viruses. Not all findings are infected
with a virus, but they may have a different cause. Therefore, for
compatibility reasons, the option
infected file action
has
been replaced in the newer versions with
concerning file
action
. You should also use this term in the notification texts for
affected users.
