spaceman1
2 Iron

Viruschecker.conf masks in production?

What is commonly specified? We were told to use masks=*.*
and exclude specific extensions, but we've gotten some conflicting opinions, specifically NOT to use masks=*.*

What do you find works well in you environment? We are using
masks=*.*
excl=????????:*.pst:*.zip:*.cab:*.tar:*.gz:*.rar:*.ldb:*.sc:*.edb:*.fmt:*.mad:*.sqc:*.stm:*.fmb:*.maf:*.sql:*.ost:*.fmx:*.mam:*.sqr:*.frm:*.maq:*.ora:*.mar:*.inp:*.mat:
*.orc:*.mda:*.mdb:*.mde:*.mdn:*.mdw:*.mdz:*.nsf
CIFSserver=??-pdm1
shutdown=viruschecking
addr=RPCRequestTimeout=90000
#limit the filesize to 16MB or 0x10000000
maxsize=0x10000000
Tags (2)
0 Kudos
1 Reply
Highlighted
bernd3
2 Bronze

Re: Viruschecker.conf masks in production?

Hi Spaceman,

we use exactly the same approach. In fact, I don't think anything other than "include all but exclude some" would work, since there exist far too many different file extensions to specify them all.
As for the exclude we use pretty much the same mask but have added *.tmp and *.inp too.

regards,
bernd