Installation Configuration at Imailzip Antivirus Software

Minimum system requirements
Operation system (tested on server and workstation boxes):
Windows NT4, Windows 2000, Windows XP, Windows 2003 Server
Hardware:
CPU 500-1200 MHz
RAM 128-256 Mb
Additional software:
Ipswitch Imail Server installed

Why compress attachments to ZIP?
This needs appear when you try to receive incoming messages remotely through GPRS or dial-up. Usually it is time consuming to download big (none-zipped) messages from users. In this way it is very cozy to receive 25 Kb message instead 650 Kb. But in local network it is not critical.
However, in some cases it is prevent automatic start up executable attached files. So any binary executable attached file appear in zip archive instead ready for execution [.exe]. Also, you can set password to any of your incoming attachments to increase security.
Would you like to compress attachments for archive or none-used mailboxes? This option is right for you.

Installation
Before install IMailZip Antivirus you must have properly installed Imail Ipswitch software.
1. Download and install IMailZip antivirus.
2. Download and install desired Antivirus Engine. Currently there are two engines supported: Kaspersky Engine and ClamAV engine.
In both cases, there are no additional requirements, just start installation file and wait until the end of the setup process. To install ClamAV engine for Windows read the appropriate installation instruction.

Kaspersky Engine installation
1. Close all imailzip anvitirus programs and stop all imailzip antivirus services
2. Uninstall software
3. Restart computer
4. Open service manager and ensure that there is no ImailZip Services installed. Otherwise remove them manually and restart computer again.
5. Install the kaspersky engine into any directory
6. Start the kaspersky GUI (kengine.exe). If you have any errors please contact our support team.
7. Set correct host and port. By default 127.0.0.1:3385
8. Restart the engine
9. Set the LiveUpdate interval
10. Restart the engine again and ensure that you have no errors.

ImailZip Antivirus installation
1. Install the imailzip antivirus to any directory.
2. After installation execute izmanager.exe module.
3. Open the “Scanner settings” tab and enter valid host and port to connect to avp engine.
4. Press “Test scanner” to ensure that you have a properly established connection. After that you must receive EICAR virus result.
5. Press register button and enter the registration keys (domain\key)
6. Restart the software

Spool scanner Installation
1. Go to the users tree and select any domain. Select the desired options.
2. Go to “Scanner settings” tab. Press Start/Stop spool scanner button. If you have a error, open Service Manager and try to start the IMailZip Daemon service manually.
3. Open ..\logs directory and watch the spool events

Configuration
All imailzip configuration parameters (except KillFile and sms.txt) you can find at registry tree:
HKEY_LOCAL_MACHINE\Software\Imailzip

Parameter	Type	Default value (Integer)	Description
Keywords	String	failed, invalid, bogus, rdeliver, ERR	Syslog viewer select all strings from sysmmdd.txt file, depends on either keyword found or not
IgnoreMbxAfter	DWord	2048	If the value of users mailbox is higher than IngoreMbxAfter parameter then IMailZip Manager will ignore local mailbox scanning for that box
Codepage	String	windows-1251	To implement zip and copy functions the program convert filenames depends on the Codepage parameter and than save it to disk
MailboxList	String	main.mbx	List of mailboxes, separated by comma, to scan for IMailZip manager module
ScannerPort	DWord	3385	The value of TCP port which IMailZip Scanner takes in order to connect to Antivirus Engine
ScannerHost	String	127.0.0.1	The value of TCP host which IMailZip Scanner takes in order to connect to Antivirus Engine
BackupPort	DWord	Undefined	The value of TCP port in order to perform the backup request to obtain the valid information. Used when the primary engine is in shutdown or in the case of the failure, timeout or unknown response. Create this parameter manually if you want to use this feature. Before using please install the secondary engine first.
BackupHost	String	Undefined	The value of TCP host in order to perform the backup request to obtain the valid information. Used when the primary engine is in shutdown or in the case of the failure, timeout or unknown response. Create this parameter manually if you want to use this feature. Before using please install the secondary engine first.
NetworkTempPath	String	Undefined	Define the absolute network path to iMailZip Daemon temporary directory (e.g. \\mailserver\c$\imailzip\tmpdir ). Necessary to implement the replacement of Antivirus Engine from Imail machine to another. Also, in the case of using the single AV engine with multiply mail servers.
DSizeLimit	DWord	2097152	Define the maximum size in bytes of incoming spool message. If the mail size value exceed this parameter the Scanner will ignore this mail.
WholeLimit	DWord	131072	The value in bytes which define the size limit of incoming mail. If the mail size exceed this value the scanner will pass whole mail content to Antivirus engine to increase performance
Base64Limit	DWord	65536	The value in bytes which define the base64 size limit of incoming mail. If the mail size exceed this value the scanner will pass whole mail content to Antivirus engine to increase performance only if there are no base64 decoded parts found
EventReload	DWord	5000	The value in milliseconds which define the timer interval to reload imailzip.log file for IMailZip Manager module. 0 means disable reload.

All other options are available from GUI interface:
Parameter Description
IMAILZIP MANAGER MODULE
Copy attachments to folder Toggle this checkbox if you wish to copy all decoded attachments to specific folder. Note that this option may copy whole mail content if you choose this option globally for iMailZip Scanner module when the size of e-mail is higher than WholeLimit parameter. iMailZip Manager will copy the extracted attachments anyway independently on WholeLimit parameter.
Apply to domain Toggle this checkbox if you wish to enable domain options to all users of that domain. In this case all individual options for users will be ignored.
Check for viruses Toggle this checkbox to enable virus scanning for iMailZip Scanner and iMailZip manager modules for selected domain or user
Do not remove suspicious Toggle this checkbox if you want to disable deletion of suspicious mail objects. In this case the subject for that mail will be overwritten with warning message
Compress attachments Toggle this checkbox if you wish to compress all attached data within e-mail. Note that this option may compress whole mail content if you choose this option globally for iMailZip Scanner module when the size of e-mail is higher than WholeLimit parameter. The default name of the zip archive is msg.zip
Set password Enter the password for Compress attachments option. All archives will be protected with the password value. Leave it blank to disable password issue.
Check for SPAM Toggle this checkbox if you wish to send a UDP request to the list of RBL hosts for the specific domain or user. If the result is the positive the mail will be marked as spam and selected action will be implemented
Action to be taken on spam e-mail Select desired action for spam market emails. Delete – will remove the spam messages on-the-fly. Modify Subject – will rewrite the subject for the e-mail as “SPAM from relay: ip address”. Insert X-Header: will insert the X-Header: ip.address string into e-mail envelope.
Enable parsing syslog Toggle this checkbox if you wish to parse and print out to the screen the content of sysmmdd.txt file, depends on Keywords parameter.
If rdeliver exceed This value define the limit for remote deliveries. If your server deliver more than that value to remote servers and pause checkbox toggled, in this case smtpd32.exe service will be in paused mode for selected interval. There are following values possible [0..14], where 0 is the lowest limit = 5 msg and 14 is the highest limit = 1000msg
Per interval Define the interval to count for remote deliveries. There are following values possible [0..7] that is equal to [1min .. 60min]
Pause SMTP Define the pause for smtpd32.exe service in minutes. There are following values possible [0..9] that is equal to [1min .. 60min]
Antivirus engine host The host value for iMailZip Scanner to connect to Antivirus engine
Antivirus engine port The port value for iMailZip Scanner to connect to Antivirus engine
Min (threads) This options specify the minimal value of the same time processing threads for local mailbox scanning. Each thread takes a separate mailbox.
Max (threads) This option specify the maximum value of the same time processing threads for local mailbox scanning. Each thread takes a separate mailbox.
CPU limit This option defines the value in % of processor utilization. If the value of processor is higher than the CPU limit parameter in this case the iMailZip Manager paused the local mailbox scanning.
Enable local mbx files scanning Toggle this checkbox to allow to load and scan local mbx files (by default main.mbx) to find viruses and perform other selected operations
Start Scanning (button) Allow to scan local mbx files and detect new messages in mailboxes
Rescan mailboxes (button) Press this button if you wish to rescan all mailboxes and drop gathered mailbox size parameters
Stop Process (button) Press this button to disable local mailbox scanning, until Start Scanning button pressed
Open Website (button) Go to http://imailzip.com website for news and updates
About (button) Show current version and credits information
Extra options/Save structure (button) Save users and domains as a plain text file as is
Extra options/Dump emails (button) Save all emails to text files in user@domain format
Extra options/Dump passwords (button) Save all emails and appropriate passwords in text format
Extra options/Show password (menu) Show password for selected user
Extra options/Check selected box(menu) Force scanning of selected mailbox from the first message in box
KASPERSKY ENGINE MODULE
KAV_O_M_PACKED To make active a mode of scanning of the packed executed files.
KAV_O_M_ARCHIVED To make active a mode of scanning of the archives.
KAV_O_M_CA To use the heuristic analyzer of a code, for searches of unknown viruses. It is recommended to use.
KAV_O_M_MAILBASES To make active a mode of scanning of mail databases.
KAV_O_M_MAILPLAIN To make active a mode of scanning of the post messages.
KAV_O_M_WARNINGS Makes active the additional mode of scanning.
KAV_O_M_REDUNDANT To use redundant scanning, for search of viruses in the damaged and spoiled files. Slows down process of scanning many times over. It is not recommended to use.
Scanner timeout Time allocated for scanning of object. On reach for this time the scanning of object will be stopped.
Scanner priority The scanning priority. The following variants of priorities are possible: high, normal, low.
Scanner host Enter the value of interface to bind. By default the value is 127.0.0.1. If you wish to bind to another interface enter appropriate value.
Scanner port The value of port to listen for iMailZip Scanner requests.
Download every LiveUpdate parameter to automatically update antivirus definitions. The following parameters are possible: never, 30 minutes, 1-6 hours.

Parameter	Description
IMAILZIP MANAGER MODULE
Copy attachments to folder	Toggle this checkbox if you wish to copy all decoded attachments to specific folder. Note that this option may copy whole mail content if you choose this option globally for iMailZip Scanner module when the size of e-mail is higher than WholeLimit parameter. iMailZip Manager will copy the extracted attachments anyway independently on WholeLimit parameter.
Apply to domain	Toggle this checkbox if you wish to enable domain options to all users of that domain. In this case all individual options for users will be ignored.
Check for viruses	Toggle this checkbox to enable virus scanning for iMailZip Scanner and iMailZip manager modules for selected domain or user
Do not remove suspicious	Toggle this checkbox if you want to disable deletion of suspicious mail objects. In this case the subject for that mail will be overwritten with warning message
Compress attachments	Toggle this checkbox if you wish to compress all attached data within e-mail. Note that this option may compress whole mail content if you choose this option globally for iMailZip Scanner module when the size of e-mail is higher than WholeLimit parameter. The default name of the zip archive is msg.zip
Set password	Enter the password for Compress attachments option. All archives will be protected with the password value. Leave it blank to disable password issue.
Check for SPAM	Toggle this checkbox if you wish to send a UDP request to the list of RBL hosts for the specific domain or user. If the result is the positive the mail will be marked as spam and selected action will be implemented
Action to be taken on spam e-mail	Select desired action for spam market emails. Delete – will remove the spam messages on-the-fly. Modify Subject – will rewrite the subject for the e-mail as “SPAM from relay: ip address”. Insert X-Header: will insert the X-Header: ip.address string into e-mail envelope.
Enable parsing syslog	Toggle this checkbox if you wish to parse and print out to the screen the content of sysmmdd.txt file, depends on Keywords parameter.
If rdeliver exceed	This value define the limit for remote deliveries. If your server deliver more than that value to remote servers and pause checkbox toggled, in this case smtpd32.exe service will be in paused mode for selected interval. There are following values possible [0..14], where 0 is the lowest limit = 5 msg and 14 is the highest limit = 1000msg
Per interval	Define the interval to count for remote deliveries. There are following values possible [0..7] that is equal to [1min .. 60min]
Pause SMTP	Define the pause for smtpd32.exe service in minutes. There are following values possible [0..9] that is equal to [1min .. 60min]
Antivirus engine host	The host value for iMailZip Scanner to connect to Antivirus engine
Antivirus engine port	The port value for iMailZip Scanner to connect to Antivirus engine
Min (threads)	This options specify the minimal value of the same time processing threads for local mailbox scanning. Each thread takes a separate mailbox.
Max (threads)	This option specify the maximum value of the same time processing threads for local mailbox scanning. Each thread takes a separate mailbox.
CPU limit	This option defines the value in % of processor utilization. If the value of processor is higher than the CPU limit parameter in this case the iMailZip Manager paused the local mailbox scanning.
Enable local mbx files scanning	Toggle this checkbox to allow to load and scan local mbx files (by default main.mbx) to find viruses and perform other selected operations
Start Scanning (button)	Allow to scan local mbx files and detect new messages in mailboxes
Rescan mailboxes (button)	Press this button if you wish to rescan all mailboxes and drop gathered mailbox size parameters
Stop Process (button)	Press this button to disable local mailbox scanning, until Start Scanning button pressed
Open Website (button)	Go to http://imailzip.com website for news and updates
About (button)	Show current version and credits information
Extra options/Save structure (button)	Save users and domains as a plain text file as is
Extra options/Dump emails (button)	Save all emails to text files in user@domain format
Extra options/Dump passwords (button)	Save all emails and appropriate passwords in text format
Extra options/Show password (menu)	Show password for selected user
Extra options/Check selected box(menu)	Force scanning of selected mailbox from the first message in box
KASPERSKY ENGINE MODULE
KAV_O_M_PACKED	To make active a mode of scanning of the packed executed files.
KAV_O_M_ARCHIVED	To make active a mode of scanning of the archives.
KAV_O_M_CA	To use the heuristic analyzer of a code, for searches of unknown viruses. It is recommended to use.
KAV_O_M_MAILBASES	To make active a mode of scanning of mail databases.
KAV_O_M_MAILPLAIN	To make active a mode of scanning of the post messages.
KAV_O_M_WARNINGS	Makes active the additional mode of scanning.
KAV_O_M_REDUNDANT	To use redundant scanning, for search of viruses in the damaged and spoiled files. Slows down process of scanning many times over. It is not recommended to use.
Scanner timeout	Time allocated for scanning of object. On reach for this time the scanning of object will be stopped.
Scanner priority	The scanning priority. The following variants of priorities are possible: high, normal, low.
Scanner host	Enter the value of interface to bind. By default the value is 127.0.0.1. If you wish to bind to another interface enter appropriate value.
Scanner port	The value of port to listen for iMailZip Scanner requests.
Download every	LiveUpdate parameter to automatically update antivirus definitions. The following parameters are possible: never, 30 minutes, 1-6 hours.

Installation Configuration

Antivirus Search

Antivirus Topics