User Guide

42 Kaspersky
®
SMTP-Gateway 5.0
5.2.4.4. Filter messages by attachment types
There are types of files, such as exe files, in which infection is highly probable.
To avoid problems, we recommend that you configure the application to filter
email by name and/or attachment types and save such objects in a separate
directory.
There are objects that cannot be infected with viruses. To reduce the load on the
server during the anti-virus scan of the email messages we recommend that you
specify the types and/or the names of such attachments so that the application
does not scan them.
Filtering of objects is performed using name masks (parameters
IncludeByName, ExcludeByName) and types (parameters IncludeByType,
ExcludeByType) in sections [smtp.policy] or [smtp.group:group_name] of
the application configuration file.
Task:
• Scan all group email messages for viruses;
• Filter email with exe attachments and block the delivery of
email messages, containing such files;
• Notify senders, recipients, and administrators about exe at-
tachments deleted, infected, corrupted, or blocked messages
and about objects the application failed to scan; add un-
changed infected messages to notifications sent to the ad-
ministrator.
Solution
: To implement the above task, do the following:
In the [smtpgw.policy] section of the configuration file assign
parameter values as follows:
IncludeByName=*.exe
ActionDisinfected=cure
ActionInfected=pass
ActionSuspicious=pass
ActionProtected=pass
ActionError=pass
ActionFiltered=pass
BlockMessage=infected, suspicious, protected, er-
ror