• MailScan with Norton Antivirus

    By Olivier COLLON 2 decades ago

    Hello everybody,

    I'm trying to test MailScan on Domino 6.5 US on W2KSP4 with Norton Antivirus 7.6 on it. I've configured it via the Notes Database but can't get it work propely (rtsvscan.exe is the real time Virus Scanner but I don't know the parameters). In fact MailScan rips every suspicious attachments but nothing gets analysed by Norton. So does anybody as tested it with this Antivirus?

    And do you have noticed that some attachments that are currently removed from the mail are not saved in the MAILSCAN\QUARA directory?



    Thanks for answering and great idea and job by the way.

    • I tried and gave up, plus other tips and issues

      By Darren Duke 2 decades ago

      I eventually went with the Windows version of F-Prot (as mentioned elsewhere the DOS version is choaked by W32 implementations of DOS).



      For $29 it beats NAV for Domino on price. On W2KSP4 Pro and XP_SP1 running Domino R6.5 it runs wonderfully, but on 6.5.1 on Windows Server 2003 we keep getting NSDs. If I turn on logging (MailScan_LogToFile=1) then it NSDs way more. Am I the first to try this combination?

      • Hi, Noorton AV ins't a command line tool. It will not work. without Text

        By Hans-Georg Franke 2 decades ago
      • I will check MailScan on Windows2003-Srv

        By Hans-Georg Franke 2 decades ago

        Hi,

        next week I got an installation of Windows2003-Server to test your experience. I can't imageine what it could be, so I am searching..

        Greetings

        Hans-Georg

        • Great

          By Darren Duke 2 decades ago

          If you need anything from me let me know. MailScan occasionally (again, only 2003 & 6.5.1) dies without NSDing and mail stops being delivered. I can "load mailscan" from the console and it comes back up and starts scanning again. I can try to log it, but that just increases the frequency of the NSD's as posted earlier :(

          • Hi Daren

            By Hans-Georg Franke 2 decades ago

            Hi Daren,

            I installed Win2003 Srv and Domino 6.5. MailScan works. Please give me more exact infos about your configuration:

            Language of installation, Notes.INI, perhaps some special configurations, versions of MailScan, virusscanner and Domino 6.5 or 6.5.1.

            Greetings Hans-Georg

            • 2003 Server config

              By Darren Duke 2 decades ago

              The server is just an SMTP inbound/outbound server but "DNS Blacklist Filters" is enabled in the Config doc. We do get an awful lot of spam from a server in Brazil, hence the enablement. Again, the server is gets considerable SMTP connections.



              The Domino server version is 6.5.1

              The CPU is a PII 450 and 512MB

              The notes.ini is just a standard one with the mailScan stuff added

              Scanner is f-prot for windows (latest defs, patches, etc)



              The only thing I can see that maybe screwing it up, is that SAV For Domino "used" to be installed. I'm in the process if moving the SMTP to a w2k server box on 6.5.1. with a virgin install of w2k. I have a feeling this will clear up my issues.



              One other thing I did notice was that the server only appears to crash when it detects a virus. It would then NSD, restart the Domino service and recan the email correctly and remove the virus. Then next detected virus would repeat the process just described.



              I'm not able to access the box today, but if any of the info is incorrect I'll update you tomorrow and post the notes.ini

              • No problems found with Windows Server 2003

                By Hans-Georg Franke 2 decades ago

                Hi Darren,

                i can't find a problem with removing attachments using MailScan with Domino on Windows2003 Server. Do you try to install a fresh Windows2003 Server?

                Greetings

                Hans-Georg

                PS: Do you have a system virus scanner for Windows? Perhaps there is as access violation to the virus infected file?