Page 1 of 1

(how-to) sophossavi installation guide

Posted: 01 Apr 2019 14:29
by nicola.piazzi
Adding an antivirus to Efa / MailScanner means to add a cpu intensive process that is inaccettable for me
I found that without antivirus each messages takes about 3 / 5 sec/cpu to be processed for spam
Adding an antivirus can take additional 5 / 15 sec/cpu
So total server Cpu increase a lot and can be inaccettable

Only clamd and sophossavi have a daemon that runs in memory and are cpu inexpensive
clamd is included in efa instalaltion
sophossavi was difficoult to use because was written in 32bit and is undocumented
I wrote these simple instructions to install and use it

Please note that i am talking of sophossavi and not sophos option in MailScanner.conf
If someone try this can tell me about it

Re: (how-to) sophossavi installation guide

Posted: 02 Apr 2019 19:34
by uzisuicida
I'm going to try it, and I'll tell you how it goes.

Re: (how-to) sophossavi installation guide

Posted: 09 Apr 2019 08:08
by nicola.piazzi
Sophos SAVI works well
Cattura.PNG
Cattura.PNG (24.66 KiB) Viewed 14828 times

Re: (how-to) sophossavi installation guide

Posted: 09 Apr 2019 13:05
by mac.linux.free
works for me, too. :clap:

Re: (how-to) sophossavi installation guide

Posted: 09 Apr 2019 13:22
by nicola.piazzi
this is great because antivirus not daemonized are unusable for me

before i used clamav and sophos

changing to sophosavi i reduced efa vm from 12 to 4 cpu !

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 08:24
by musabr187
Hi Nicola,

It’s working. Thanks for your document.
How did you add Sophos SAVI on Virus report? It’s not showing up in scanner column.

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 08:28
by nicola.piazzi
Nothing done in virus report, if you dont see i suppose you havent received viruses detected by savi at now

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 09:19
by musabr187
It's not catching test virus 'EICAR-AV-Test' on the report.

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 09:22
by nicola.piazzi
EICAR CATCH is excluded by report, you need to include it modifiyng source or wait to receive virus

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 09:26
by musabr187
Okay, thanks. Waiting for virus :)

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 09:29
by nicola.piazzi
i modified report but i dont remember where

if you have echange consider to use OW plugin

Re: (how-to) sophossavi installation guide

Posted: 16 Apr 2019 09:35
by musabr187
Okay, I'll check it out later.

Re: (how-to) sophossavi installation guide

Posted: 17 Apr 2019 04:24
by musabr187
Password protected zip file is blocked by SophosSAVI '.zip caused an error: File was encrypted (530)', where I need to change to disable this.

Re: (how-to) sophossavi installation guide

Posted: 17 Apr 2019 09:21
by nicola.piazzi
somewhere there is this, buit for me is ok so

Re: (how-to) sophossavi installation guide

Posted: 17 Apr 2019 09:25
by musabr187
/etc/MailScanner/MailScanner.conf

##Allowed Sophos Error Messages =
Allowed Sophos Error Messages = "File was encrypted", "Password protected file"

This will allow encrypted/password protected files to pass.