LogLevel = {logging level}
|
Logging level.
If the parameter value is not specified, the DefaultLogLevel parameter value from the [Root] section is used.
Default value:
LogLevel = Notice
|
Log = {log type}
|
Logging method.
Default value:
Log = Auto
|
ExePath = {path to file}
|
Path to the executable file of the component.
Default value:
ExePath = <opt_dir>/bin/drweb-smbspider-daemon
•For Linux: ExePath = /opt/drweb.com/bin/drweb-smbspider-daemon
•For FreeBSD: ExePath = /usr/local/libexec/drweb.com/bin/drweb-smbspider-daemon
•For Solaris: ExePath = /opt/drweb.com/bin/drweb-smbspider-daemon
|
Start = {boolean}
|
The component must be launched by the configuration daemon Dr.Web ConfigD.
When you specify the Yes value for this parameter, it instructs the configuration daemon to start the component immediately; and when you specify the No value, it instructs the configuration daemon to terminate the component immediately.
Default value:
Start = Yes
|
SambaChrootDir = {path to directory}
|
Defines the path to the root directory of the SMB file storage (can be redefined by the file server with the help of the chroot restriction).
Used as a prefix inserted at the beginning of all paths to files and directories residing in the file server’s storage and describes the path relative to the root of the local file system.
If not specified, the path to the file system root is used /.
Default value:
SambaChrootDir =
|
SmbSocketPath = {path to file}
|
Path to the socket file which enables interaction between SpIDer Guard for SMB and VFS SMB modules.
The path is always relative and is a supplement for the path specified as the ChrootPath parameter value.
Default value:
SmbSocketPath = var/run/.com.drweb.smb_spider_vfs
|
ActionDelay = {time interval}
|
Delay time between the moment when a threat is detected and the moment when SpIDer Guard for SMB applies the action specified for this threat type. During this time period, the file is blocked.
Default value:
ActionDelay = 24h
|
MaxCacheSize = {size}
|
Size of cache used by VFS SMBmodules to store data on scanned files in monitored SMB directories.
If 0 is specified, data is not cached.
Default value:
MaxCacheSize = 10mb
|
[*] ExcludedPath = {path to file or directory}
|
Path to the shared directory object which must be skipped during scanning. You can specify a directory or file path. It is also possible to use file masks (which contain the characters '?' and '*', as well as character classes '[ ]', '[! ]', '[^ ]').
You can specify a list as the parameter value. The values in the list must be separated with commas. The parameter can be specified more than once in the section (in this case, all its values are combined into one list).
If a directory is specified, all directory content will be skipped.
Default value:
ExcludedPath =
|
[*] IncludedPath = {path to file or directory}
|
Path to the shared directory object, which must be scanned. You can specify a directory or file path. It is also possible to use file masks (that contain the characters '?' and '*', as well as character classes '[ ]', '[! ]', '[^ ]').
You can specify a list as the parameter value. The values in the list must be separated with commas. The parameter can be specified more than once in the section (in this case, all its values are combined into one list).
If a directory is specified, all directory content will be scanned.
Note that this parameter has higher priority than the ExcludedPath parameter (see above); that is, if the same object (file or directory) is specified in both parameter values, this object will be scanned.
Default value:
IncludedPath =
|
[*] AlertFiles = {Boolean}
|
Indicates whether a text file is created next to an object blocked by SMB directory monitor as malicious. The created text file describes the reason why the object was blocked. The created file will be named as <name of the blocked file>.drweb.alert.txt.
Allowed values:
•Yes—Files are created. •No—Files are not created. Default value:
AlertFiles = Yes
|
[*] OnKnownVirus = {action}
|
Action applied by Dr.Web for UNIX to a known threat (virus, etc.) detected by using signature analysis during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Block, Cure, Quarantine, Delete
Default value:
OnKnownVirus = Cure
|
[*] OnIncurable = {action}
|
Action applied by Dr.Web for UNIX to an incurable threat (that is, an attempt to apply Cure failed) detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Block, Quarantine, Delete
Default value:
OnIncurable = Quarantine
|
[*] OnSuspicious = {action}
|
Action applied by Dr.Web for UNIX to an unknown threat (or suspicious objects) detected by using heuristic analysis during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnSuspicious = Quarantine
|
[*] OnAdware = {action}
|
Action applied by Dr.Web for UNIX to adware detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnAdware = Pass
|
[*] OnDialers = {action}
|
Action applied by Dr.Web for UNIX to a dialer program detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnDialers = Pass
|
[*] OnJokes = {action}
|
Action applied by Dr.Web for UNIX to joke programs detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnJokes = Pass
|
[*] OnRiskware = {action}
|
Action applied by Dr.Web for UNIX to riskware detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnRiskware = Pass
|
[*] OnHacktools = {action}
|
Action applied by Dr.Web for UNIX to a hacktool detected during the scanning initiated by SpIDer Guard for SMB.
Allowed values: Pass, Block, Quarantine, Delete
Default value:
OnHacktools = Pass
|
[*] BlockOnError = {Boolean}
|
Indicates whether SpIDer Guard for SMB blocks access to a file if an attempt to cure it resulted in an error.
Allowed values:
•Yes—block access to a file. •No—access to a file is not blocked. Default value:
BlockOnError = Yes
|
[*] ScanTimeout = {time interval}
|
Timeout for scanning one file initiated by SpIDer Guard for SMB.
A value in the range from 1s to 1h can be specified
Default value:
ScanTimeout = 30s
|
[*] HeuristicAnalysis = {On | Off}
|
Indicates whether heuristic analysis is used for detection of unknown threats during the scanning initiated by SpIDer Guard for SMB. Heuristic analysis provides higher detection reliability but, at the same time, it increases time of virus scanning.
Action applied to threats detected by heuristic analyzer is specified as the OnSuspicious parameter value.
Allowed values:
•On—instructs to use heuristic analysis when scanning. •Off—instructs not to use heuristic analysis. Default value:
HeuristicAnalysis = On
|
[*] PackerMaxLevel = {integer}
|
Maximum nesting level when scanning packed objects. All objects at a deeper nesting level are skipped during the scanning initiated by SpIDer Guard for SMB.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
PackerMaxLevel = 8
|
[*] ArchiveMaxLevel = {integer}
|
Maximum nesting level when scanning archives. All objects at a deeper nesting level are skipped during the scanning initiated by SpIDer Guard for SMB.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
ArchiveMaxLevel = 0
|
[*] MailMaxLevel = {integer}
|
Maximum nesting level when scanning email messages and mailboxes. All objects at a deeper nesting level are skipped during the scanning initiated by SpIDer Guard for SMB.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
MailMaxLevel = 8
|
[*] ContainerMaxLevel = {integer}
|
Maximum nesting level when scanning other containers (for example, HTML pages). All objects at a deeper nesting level are skipped during the scanning initiated by SpIDer Guard for SMB.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
ContainerMaxLevel = 8
|
[*] MaxCompressionRatio = {integer}
|
Maximum compression ratio of scanned objects (ratio between the compressed size and uncompressed size). If the ratio of an object exceeds the limit, this object is skipped during the scanning initiated by SpIDer Guard for SMB.
The compression ratio must not be smaller than 2.
Default value:
MaxCompressionRatio = 500
|