Milter Connections

On this page you can specify parameters of connection Dr.Web MailD on the protected mail server to email servers (MTA) via Milter interface:

Use heuristic analysis—instructs Dr.Web MailD to use the heuristic analysis on the protected mail server to detect unknown threats in email messages received from MTA via the Milter. Note that heuristic analysis may slow down the checking but improves its reliability.

Timeout to scan one message—restrictions on maximal time spent on scanning of one email message by Dr.Web MailD (for email messages received from MTA via the Milter). If the value is 0, scan time is not limited.

Maximum nesting level. In this section you can specify settings which Dr.Web MailD is used for checking compound files (containers) of the following types: archives, mail files (email messages, mailboxes), packed objects and other containers (i.e. compound files that are not classified as archives, mail files or packed objects) that attached to email messages received from MTA via the Milter.

For each of the types you can specify in the corresponding field the maximum nesting level. The objects that are nested into container deeper than the specified level are skipped during scanning the container by Dr.Web MailD. For example, if you want scan the contents of the archives which are nested into archives, specify the maximum nesting level not less than 2. To disable scanning of nested objects, specify 0 as the maximum nesting level for the corresponding type of containers.

Note that increasing of maximum nesting level slows down the file system monitoring.

The Maximum compression ratio field allows you to specify maximum compression ratio (as a ratio of size of compressed file to its original) for compressed files. If compression ratio of a file is greater than the maximum allowed, the file is skipped during the check.

Socket for connections of MTA via Milter—defines the socket for integration Dr.Web MailD with MTA as a Milter filter of mail (MTA will connect to this socket when using Dr.Web MailD as the corresponding filter). You can specify here the UNIX socket (as a path) or the network socket (as an IP address:port pair).

Block unchecked email messages—set the checkbox to block transmission of an email message received for scanning via the Milter, if its contents could not be scanned.

Email processing rules for Milter—the section defines rules that are used by Dr.Web MailD to all email messages received from MTA for checking via the Milter interface.

To add new rule in the list, click icon-item-add near the corresponding list item. To delete some rule from the list, click icon-item-remove near the corresponding list item.

For more information about the rules see Appendix A. Traffic Checking Rules.