Anti-virus integration, when enabled, makes AfterLogic XMail Server pass every e-mail as a file to the anti-virus scanner. AfterLogic XMail Server uses command line interface for this. Thus, the anti-virus scanner must support calling it from the command-line to scan the specified e-mail file and return the integer code (for instance, 1=infected or 0=normal) back to the caller.
AfterLogic XMail Server then adds X-Virus-Header to the infected e-mails. When the user checks mail in WebMail interface, WebMail module moves such e-mails into Quarantine folder of the user.
Currently, the anti-virus integration has been tested with the following anti-virus programs: AVG, McAfee, ClamAV. However, if you're using another anti-virus program which can be called from the command line, it should work too.
Some anti-virus programs do include command-line scanner out-of-box but such application can usually be found on their web sites.
The step-by-step guide follows (it assumes you have installed AfterLogic XMail Server into the default location).
1. Open the following file in a text editor:
Windows:
C:/Program Files/AfterLogic XMail Server/MailRoot/filters/axav.ini
Linux/Unix:
/var/MailRoot/filters/axav.ini
2. Find [XMail AntiVirus Filter] section (if it's missing, add it).
It contains fields which let AfterLogic XMail Server know where it can find the anti-virus filter executable and how to pass parameters to the selected anti-virus.
3. You can add anti-virus scanner definition as below:
AntivirusPath=FOLDER_AND_FILENAME_OF_INSTALLED_ANTI_VIRUS_SCANNER_EXECUTABLE AntivirusCommand=command line parameters. "%s" means the e-mail message file to be scanned. AntivirusReturn=integer return code value returned by ANTI_VIRUS_SCANNER_EXECUTABLE for infected e-mail files.
AntivirusPath example (Windows):
C:\Program Files\McAfeeVirusScanCommandLine\scan.exe
AntivirusPath example (Linux):
/usr/local/clamAV/clamscan
Note that only a single anti-virus scanner can be enabled. You cannot use different anti-virus scanners simultaneously.
Examples:
Your XMail AntiVirus Filter section in axav.ini may look like below (";" or "#" as the first character on the line means comments).
[XMail AntiVirus Filter]
; Example 1: McAfee VirusScan Command Line Scanner
AntivirusPath=C:\Program Files\McAfeeVirusScanCommandLine\scan.exe
AntivirusCommand="%s" /NOBEEP /SILENT
AntivirusReturn=13
; Example 2: ClamAV
AntivirusPath=C:\Program Files\clamAV\clamscan.exe
AntivirusCommand="%s" --quiet
AntivirusReturn=1
; Example 3: AVG
AntivirusPath=C:\Program Files\AVG\AVG8\avgscanx.exe
AntivirusCommand=/scan="%s"
AntivirusReturn=5