To Configure SAVSE

1. Create the SAVSE configuration file.

   The name and location of this file is specified in the next step. The name used here is SAVSE.opt. An example of this file is shown below:

   host=127.0.0.1 port=1344 mode=0 verdict=virus debug=1

   host and port specify the name of the system where the SAVSE program is running and the port (1344 is the default for SAVSE) on which it listens for incoming requests. mode=0 specifies that a string, specified by verdict (in this case the word virus), will be returned if the message is perceived to contain a virus. debug=1 turns on debugging. See 14.5.5 SAVSE Options for a description of the ICAP configuration parameters.

2. Create an option.dat file. Example:

   ! for Symantex Anti-virus Scan Engine spamfilter1_config_file=/opt/SUNWmsgsr/config/SAVSE.opt spamfilter1_library=/opt/SUNWmsgsr/lib/libicap.so spamfilter1_optional=1 spamfilter1_string_action=data:,discard

   spamfilter1_config_files specifies the SAVSE configuration file.

   spamfilter1_library specifies the location of the SAVSE shared library.

   spamfilter1_optional=1 specifies that the MTA continue operation if there is a failure by the SAVSE program.

   spamfilter1_string_action specifies the Sieve action to take for a spam messages. This value specifies that messages with viruses are discarded. Since this is the default value, you don’t have to specify it unless you are changing the value.

3. Specify the messages to be filtered.

   To filter all messages coming into the local message store, change the imta.cnf file by adding the destinationspamfilter1optin spam keywords on the ims-ms channel:

   ! ! ims-ms ims-ms defragment subdirs 20 notices 1 7 14 21 28 backoff "pt5m" "pt10m" "pt30m" "pt1h" "pt2h" "pt4h" maxjobs 4 pool IMS_POOL fileinto $U+$S@$D destinationspamfilter1optin virus ims-ms-daemon

4. Recompile the configuration and restart the server. Only the MTA needs to be restarted. You do not need to execute stop-msg.

   # imsimta cnbuild # imsimta restart

5. Make sure SAVSE is started.

   It should have started automatically, but if not, the start command might looks something like this: /etc/init.d/symcscna start