Avast (home) doesn't scan all incoming 'mail'?

Hi

I’ve got the Home version of avast and win 98SE. I’m running avast on a server at my home. This server is not comercial and I just run the server for fun. (So this is why I have the (free) home edition and not the server edition)

The server is also running a mailserver. Does anybody know if Avast scan all the email ports (110 and 25)?

I don’t think so becouse If I send a email to my own server, there is no line included like “Avast have scanned this email, it is save” after I checked the “include a line to non-infected emails” (translation).

So it means It doesn’t scan any incoming and outgoing mail acivity (?).

Mail scanning does not work automatically. Avast mail scanner scans only mail that is redirected to it. This is what the Mail wizard does at workstations. It is not usable for configuration at a server. You need to configure it manually according to help chapter Manual setting of mail protection/Cooperation with other software.

Sander, did you install the Home version into a system running Windows Server? ::slight_smile:

I use argosoft’s mailserver.
After I intalled the virusscanner, the computer need to reboot my server everyday :-
Now I’m trying to find out what the problem is (Mailserver or Avast).

Tnks for so far.
So, 'll be back in a couple of days. Sorry :wink:

Now I found the good part of the help programm :slight_smile:

This is what I have done in my .ini file
[MailScanner]
DefaultSmtpServer=127.0.0.1:25
DefaultPopServer=127.0.0.1:110
SmtpListen=127.0.0.1:25
PopListen=127.0.0.1:110
ImapListen=127.0.0.1:143
ShowTrayIcon=1
UseDefaultSmtp=0
AutoSetProtection=0

My Mailserver is working again but I still see no line of Avast! in my e-mails

Default…Server setting means where your mail server accept connections.

…Listen setting means where the mail scanner accept connections. It cannot be 127.0.0.1 if you want to accept connections from another computer. You can e.g. set
PopListen=:111
and set port 111 for POP in your mail client settings.

I suggest you take a look here for more information about the avast4.ini file and Mail configuration. :wink:

OK,

This is the situation now. The Mail server runs on this ports:
SMTP: 25
POP: 110
Imap: 143

Avast4.ini:
[MailScanner]
DefaultSmtpServer=127.0.0.1:25
DefaultPopServer=127.0.0.1:110
SmtpListen=:26
PopListen=:111
ImapListen=:144
ShowTrayIcon=1
UseDefaultSmtp=0
AutoSetProtection=0

The server and Avast4 are running on this IP 10.0.0.13, and the client computer wich have to connect is running on 10.0.0.7 (inrelevant)

If I set my client on port 111, it will try to connect to 10.0.0.13:111. So it will connect to Avast4. Avast will scan the e-mail and then give it to the IP/port 127.0.0.1:110. And that … is my mailserver!! WHOOo, yeah !!!

The problem is, it does not work. If I try to connect to 10.0.0.13:111, This message is returned :
" Username hase been refused
Reactie from server:
‘-ERR no POP server defined. Use avast! Mail Protection Wizard to configure it.’,
Poort: 111 "

So … what is my mistake?

  1. either DefaultPopServer was not found

  2. or the username in your mail client is not good

  3. Look to the file Avast4\DATA\log\aswMaiSv.log and search for “POP Default server settings changed:”, what is there ?

  4. does your username contain ‘#’ ?

“02/25/04 15:39:20: Cannot connect to POP server mydomain.com:110. connect error 10061
02/25/04 15:39:28: Cannot connect to POP server mydomain.com:110. connect error 10061
02/25/04 15:40:33: Cannot connect to POP server mydomain.com:110. connect error 10061
02/25/04 16:08:36: Cannot connect to POP server mydomain.com:110. connect error 10061”
2) The username contains the ‘#’

So, he is trying to connenct with my IP adres (mydomain.com). That’s not good, he have to send it to my local IP, haven’t he?

But, I don’t understand. If there is a email send to user@mydomain.com, he comes in on port 25. What is Avast’s job if there is a email send to por 25? He will just not notice it, becouse he is listening on port 26 ?!?!

If the username looks like NAME#SERVER:PORT, avast will connect to SERVER:PORT and login here as NAME.
If the username is NAME without any ‘#’, avast will connect to DefaultPopServer and login here as NAME.

In your configuration avast will check only mail that comes with SMTP to port 26 and that is retrieved with POP from port 111.

Ok guys, it is working (yeah):

[MailScanner]
DefaultSmtpServer=127.0.0.1:24
DefaultPopServer=127.0.0.1:109
DefaultImapServer=127.0.0.1:142
SmtpListen=:25
PopListen=:110
ImapListen=:143
ShowTrayIcon=1
UseDefaultSmtp=0
AutoSetProtection=0

The mailserver is listening on port 24,109,142

It is all working fine :). Only one thing where Avast still doesn’t check viruses is, if I compose a message ot webmail (a service of my mailserver) and I if send the message, it does not add the line ‘This message is save’.

So that means, a message witch is made with the webmail program, does not going through the normal ports. I don’t thing so. Why is Avast not scanning that part of the server?

Yes, the message is send by other ports (used by the browsers)… 8)
The avast! Internet Mail just scan the pop3/smtp messages :wink:

Oh no, evil browsers :slight_smile:

There is no way to scan those activities?

I think the server sends it directly to the destination mail server. It is probably not configurable and thus cannot be redirected to the mail scanner.

Yes, the Standard Shield (configured with the proper extension files) and, in the Professional version of avast!, the Script Blocker.

Sorry, but I’m not sure at all of the extensions you may list for scanning ‘emails’. Anyway, I cannot imagine why you couldn’t configure your email client and avast! to work properly… A lot of users did it! avast! must have the same port setting as your email client (if you do not use a spam killer or other 3rd party application).

If you say the Standard Shield scan shoud scan those files only when I give up the extensions then it is allright. But he won’t include a line like ‘this file is save’ (there is no option in the Standard Shield).

Now I have to find out what extensions my emailserver is using, am I right?

The better you can achieve with this is in the ‘Report’ file options. Check the ‘OK files’…

Not exactly, I think the behavior of an incoming email is not the same as downloading a file but… if you need a suggestion, try to add the following lines to your settings:

On open: WS?,VBS,VBE,JS,JSE,HTA,WSF,WSH,SHS,SHB,HTM*
Files created or [/b]modified[/b]: ACE,ARC,ARJ,BZIP2,CAB,COM,GZIP,PST,RAR,TAR,ZIP,ZOO,ECE

Okey :D,

Thank you, this did indeed worked fine. Now Avast can scan all the things I want. pop,smtp, html and all webbased e-mail.

Tnks :slight_smile: