Unsolved
This post is more than 5 years old
1 Rookie
•
92 Posts
0
760
Viruschecker.conf masks in production?
What is commonly specified? We were told to use masks=*.*
and exclude specific extensions, but we've gotten some conflicting opinions, specifically NOT to use masks=*.*
What do you find works well in you environment? We are using
masks=*.*
excl=????????:*.pst:*.zip:*.cab:*.tar:*.gz:*.rar:*.ldb:*.sc:*.edb:*.fmt:*.mad:*.sqc:*.stm:*.fmb:*.maf:*.sql:*.ost:*.fmx:*.mam:*.sqr:*.frm:*.maq:*.ora:*.mar:*.inp:*.mat:
*.orc:*.mda:*.mdb:*.mde:*.mdn:*.mdw:*.mdz:*.nsf
CIFSserver=??-pdm1
shutdown=viruschecking
addr=RPCRequestTimeout=90000
#limit the filesize to 16MB or 0x10000000
maxsize=0x10000000
and exclude specific extensions, but we've gotten some conflicting opinions, specifically NOT to use masks=*.*
What do you find works well in you environment? We are using
masks=*.*
excl=????????:*.pst:*.zip:*.cab:*.tar:*.gz:*.rar:*.ldb:*.sc:*.edb:*.fmt:*.mad:*.sqc:*.stm:*.fmb:*.maf:*.sql:*.ost:*.fmx:*.mam:*.sqr:*.frm:*.maq:*.ora:*.mar:*.inp:*.mat:
*.orc:*.mda:*.mdb:*.mde:*.mdn:*.mdw:*.mdz:*.nsf
CIFSserver=??-pdm1
shutdown=viruschecking
addr=RPCRequestTimeout=90000
#limit the filesize to 16MB or 0x10000000
maxsize=0x10000000
bernd3
42 Posts
1
May 4th, 2009 23:00
we use exactly the same approach. In fact, I don't think anything other than "include all but exclude some" would work, since there exist far too many different file extensions to specify them all.
As for the exclude we use pretty much the same mask but have added *.tmp and *.inp too.
regards,
bernd