User Guide

38 Kaspersky Anti-Virus® for Sendmail with Milter API
6.2. Blocking infected messages
You can block messages using several methods: the administrator can either
delete an infected message without notifying the recipient beforehand or return
an error code to the sender as if it were sent by the mail agent.
Task
: Block infected e-mail messages, delete them, and notify the
administrator of such events.
To perform the task, configure the application as follows:
1. Set the following parameters in the default.conf configuration file:
[group.settings]
ScanPolicy=combined
[group.actions]
DefaultAction=drop
[group.notifications]
EnableNotifications=on
SendmailPath=/usr/sbin/sendmail
NotifyAdmin=infected
AdminAddresses=admin@localhost
UseCustomTemplates=on
AdminSubject=Anti-virus notification message
2. Set the following parameters in the kavmilter.conf configuration file:
[kavmilter.engine]
ScanArchives=yes
ScanPacked=yes
ScanCodeanalyzer=yes
Task
: Reject infected messages from the sender, return an error code
to the sender, and notify the administrator of the actions.