IceWarp forums have moved: http://forum.altair7.org

AntiVirus Filter DLL

Version 1.1.3 released 29 October 2003

If you currently use McAfee VirusScan, F-Prot Antivirus for DOS or Grisoft AVG as an external virus scanner with Merak Mail, this filter DLL provides enhanced functionality by providing the name and location of the virus to Merak Mail so it can be reported to the SMTP client sending the email. Refer to the readme.txt file included with the distribution for installation instructions. You must be using Merak Mail v5.0.2 or later for this filter to be able to pass the virus name information to Merak Mail.

This version is capable of generating emails to the sender, recipients, and any other specified email addresses when a virus is found. The virus information, SMTP header information and a limited number of other items can be included in the emails. Refer to the configuration sample included for an idea of what is available. You have full control over the email content.

Documentation is the next item up on the list for work on this DLL. Until then, if you can't figure something out from the included files, feel free to email me at doug@2150.com.

You will need to turn off the regular Merak External AntiVirus scanner option (if you've been using an external antivirus scanner this way already) so that Merak Mail doesn't discard an email with a virus before sending it to this filter.

Note: This filter can be expanded to handle any AntiVirus program that can be invoked in a separate process, can generate an individual report file, and preferably returns an exit code when a virus is found (though this could also be determined by parsing the report file if necessary). If you have a favorite AntiVirus program you would like this filter to support, send me:

1) At least one virus scan report file of a scan of a file that contains a virus (it can be the Eicar test virus, though I'd prefer a real one, as some programs report the test virus in a different format, so there are parsing differences);

2) The full command line options required to have the program scan a single named file and generate a report in another named file, suppressing any prompts. If you already use this scanner in Merak, then the parameters you already are using will be a good starting point.

3) Information about all possible exit codes the program returns.

4) The name and version of the virus scanner this is from.

Once I receive this information, I will send you a version of this filter to test for a few days that will capture some additional example report files using your AntiVirus scanner. It will block viruses but may not report complete information. With those additional sample files, I should be able to finalize the parsing for a particular AntiVirus scanner.

There is no charge. The only cost is your assistance in the process of testing it.

Download AntiVirus Filter

 

Mail Server Content Filter

Information about the RegEx-based Mail Server Content Filter DLL can be found at http://www.2150.com/regexfilter/.

 

Write Your Own Filter DLL

Interested in writing your own filter DLL for Merak Mail? Download this sample Microsoft Visual C++ .NET project for an example filter that provides all the basic parsing of information from Merak Mail's new MerakFilterProc2 interface as well as backward compatibility with the original MerakFilterProc interface.