I like this suggestion. In this way there could be even a third or fourth 
scanner called if desired without interfering each other on the host system.

regards
Marco


-----Original Message-----
From: Steve Moss [mailto:[email protected]] 
Sent: Sonntag, 15. März 2009 20:09
To: ASSP development mailing list
Subject: Re: [Assp-test] Antwort: File System Virus Scanner

I welcome this new feature, Thomas, but I would suggest a change to the
way it is implemented (which may not be to everyone's way of thinking,
admittedly). Your approach is to let the resident scanner of the host
machine's antivirus scan the specified folder as files are created
there, and for it to delete files that are infected. This may not
actually achieve your goal of multiple scanner support, as ASSP is just
using the already installed resident scanner. Also, the resident scanner
may not be configured to delete infected files - some scanners are
configured to, e.g., clean, then delete. In this case, the file placed
there by ASSP may be changed (cleaned) but will remain there. For ASSP
to require the resident scanner be re-configured to delete only may not
go down well with a sysadmin. Also, a resident scanner may well already
be configured to exclude the ASSP folder hierarchy from scanning -
placing the virusscan folder there will create a problem.

Might I suggest that, instead, ASSP invokes a user-specified command
line a/v scanner. This would be in line with the way other apps that
integrate with users' a/vs and, I believe, be much more flexible for the
user. ASSP would then offer a configuration setting that specifies the
command line to be used, with a way to specify a replaceable 'filename'
parameter.

Steve.

-----Original Message-----
From: Thomas Eckardt/eck [mailto:[email protected]] 
Sent: Sunday, March 15, 2009 6:44 PM
To: ASSP development mailing list
Subject: [Assp-test] Antwort: File System Virus Scanner

Hi all,

I need some feedback about this feature, because there are many
different 
antivirus solutions on the market.
At this time, ASSP assumes that the file will be deleted by the 
filescanner if it is infected. But I know that professional solutions
like 
SAV or McAffee do not allow to close the file,
so the file does never realy exists in the filesystem. For such virus 
scanners I recommend to set  'FileScanPreTimeout' = 0 and 
'FileScanTimeout' = 0 or 1   -  the default for both is 3 seconds, which

may cause in a too long wait time.

Why this feature? It makes it possible to scan emails with two different

scan engines and patternfiles! This is the minimum recommendation for a 
professional environment! A third scan should be done by the mailserver 
and/or client.

The file scan is fully implemented in to the
'ASSP_AttachmentFullCheck.pm' 
version 1.04. So it is possible to unpack and scan attachments on
multiple 
levels - if your file scanner is able to do this.

Any commet is welcome!

Thomas


DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential,
legally 
privileged and protected in law and are intended solely for the use of
the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************



------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to