Commandline version of F-Prot?
Commandline version of F-Prot?
Hi Peter,
What version of F-Prot do you need to get this working? I downloaded the free DOS-based commandline version of F-Prot, and pointed ME to the F-PROT.EXE... will this work? I sent the standard eicar.com 68-byte file through, but it doesn't seem like it works. Is it supposed to replace the attachment with a txt attachment containing "<<- Attachment was removed... blah blah ->>"?
Thanks,
Mike
What version of F-Prot do you need to get this working? I downloaded the free DOS-based commandline version of F-Prot, and pointed ME to the F-PROT.EXE... will this work? I sent the standard eicar.com 68-byte file through, but it doesn't seem like it works. Is it supposed to replace the attachment with a txt attachment containing "<<- Attachment was removed... blah blah ->>"?
Thanks,
Mike
-
- Site Admin
- Posts: 1127
- Joined: Mon Jun 10, 2002 6:31 pm
- Location: Melbourne, Victoria, Australia
The new version of the Professional kit, which was just uploaded, supports the free version (for personal use), but due to some issues with running it under MailEnable it is a lot slower than running the command line application in the Windows version of F-Prot.
More anti-virus applications will be supported soon.
More anti-virus applications will be supported soon.
-
- Site Admin
- Posts: 4441
- Joined: Tue Jun 25, 2002 3:03 am
- Location: Melbourne, Victoria Australia
Mike,
The issue with running F-PROT (DOS), the Freeware one, is that it creates a new Virtal DOS machine for every file processed (VERY Intensive) and is likely to cause stability problems. None the less,we have load tested the now current beta of Pro/AV and it seems to cope... but it is something that we would not recommend for obvious reasons.
As mentioned the new version of professional has improved A/V support - we should now be able to integrate with all major A/V vensors very easily.
The answer is (right now) FRISK (FPCMD.EXE) and SOPHOS. We will post on this as we move closer to the release.
Regards,
Dave
The issue with running F-PROT (DOS), the Freeware one, is that it creates a new Virtal DOS machine for every file processed (VERY Intensive) and is likely to cause stability problems. None the less,we have load tested the now current beta of Pro/AV and it seems to cope... but it is something that we would not recommend for obvious reasons.
As mentioned the new version of professional has improved A/V support - we should now be able to integrate with all major A/V vensors very easily.
The answer is (right now) FRISK (FPCMD.EXE) and SOPHOS. We will post on this as we move closer to the release.
Regards,
Dave
Regards, Andrew
fprot
I am now using fprot and it has clogged up my inbound queue no mail is being passed from the inbound queues to the post offices. any suggestions. this si with newest mailenable and fprot 3.12a
-
- Site Admin
- Posts: 4441
- Joined: Tue Jun 25, 2002 3:03 am
- Location: Melbourne, Victoria Australia
It is likely that your MTA will need to be restarted (as this is responsible for moving messages between connector queues).
Make sure you use the FPCMD.EXE file as the path to your virus scanning utility.
In the short term, you should probably disable anti-virus until you queues clear.
Make sure you use the FPCMD.EXE file as the path to your virus scanning utility.
In the short term, you should probably disable anti-virus until you queues clear.
Regards, Andrew
did it again
Ok I tested it again and it does the ame thing. I also downloaded the newest versions of mailenable off the site, I enabled antivirus plugin then set it to fprot, then stopped and started my MTA. MTA started fine and seemed to be working but after a day of use MTA will no longer transfer inbound message and has died. I had to go into the registry and turn it from enabled=1 to enabled =0, just so my mta will start back up. is this a problem for anyone else or am I just not getting it right somewhere.
F-StopW.exe
So that the anti-virus works, it is necessary to have out or outside of service the "Real Time Protector" whose file is F-StopW.exe.
The F-StopW.exe, if it is being executed, it impedes the erased of the infected files.
The F-StopW.exe, if it is being executed, it impedes the erased of the infected files.
-
- Site Admin
- Posts: 4441
- Joined: Tue Jun 25, 2002 3:03 am
- Location: Melbourne, Victoria Australia
This is correct. When the service attempts to access files - the F-Prot "Real Time Protector" prevents the deletion of the virus; hence inhibiting the removal.
In short, you should not run any Real-Time antivirus protection on a PC that is running the MTA with Virus Protection enabled (from within ME).
In short, you should not run any Real-Time antivirus protection on a PC that is running the MTA with Virus Protection enabled (from within ME).
Regards, Andrew