User Guide

38 Kaspersky Anti-Virus for Proxy Server
• object_suspicious – template containing a notification about detection of
an object suspected of being infected with an unknown virus.
• object_warning – template containing a notification about detection of an
object that resembles the code of a known virus.
• object_protected – template containing a notification about detection of
a password-protected object.
• object_error – template containing a notification about detection of an
object, which has caused a scanning error.
• object_corrupted – template containing a notification about detection of
a damaged object.
• object_cured – template containing a notification about detection of an
infected object that has been successfully cured.
Administrators can modify the text of these templates at their discretion including
addition of special macros (see Appendix A.2 on p. 55).
Example
: Specify the following actions over scanned objects for the
default group:
• allow transfer of the objects that have been assigned the
CURED and PROTECTED status
• prohibit transfer of all other objects.
Solution
: to accomplish the task, log in as the root (or any other
privileged user) and specify the following parameter values in the
[icapserver.actions] section:
[icapserver.actions]
CuredAction=skip
ProtectedAction=skip
InfectedAction=deny
SuspiciousAction=deny
WarningAction=deny
ErrorAction=deny
CorruptedAction=deny
5.4. Administrator notifications
Every time when the application performs the deny action over an object
transferred through the proxy, it also runs a special script. The string launching