## "Group options are available as a shortcut and to offer a degree of ## future-proofing in areas of SAVI configuration where precise control of ## every option is not critical." ## Source: Sophos SAVI developer Toolkit Supplement (v.4.2) # Group setting Options: # 0 - Off # 1 - On. # 2 (or greater) - invalid. None of the items in the group will be altered. # Note: group options return as Invalid (a value of 2) with GetConfigValue(), # ie "sophie -c" ############################################################################ # # # Group options automatically activate/deactivate all options that belong # # to the group. You'll have to figure out what belongs where, sorry # # # # If you want to deactivate certain feature from a group, just set it to 0 # # but make sure group definitions do remain at the top of this file # # # # The config options are read from top down, thus the last item read will # # be the configuration used. # # # ############################################################################ # The Following options represent a setting appropriate for the detection of # viruses in Internet Mail processing. # June / 2005. ## Sophos has many options enabled by default. Those listed in each group show ## items enabled that are not on by default. # Executable files. GrpExecutable: 1 # All archive and compressed archive file formats. # Enables: ArjDecompression, bzip2, CmjDecompression, GzipDecompression, # ISCabinet (InstallShield), MbinDecompression (MacBinary), MSCabinet, # MSCompress, RarDecompression, Rpm, SfxArchives (Self-extracing), Stuffit, # TarDecompression, TnefAttachmentHandling, UnixArchivem UueDecompression, # ZipDecompression. GrpArchiveUnpack: 1 # File formats that contain an executable stub that automatically # decompresses the body of the file. GrpSelfExtract: 1 # File formats commonly in use on the internet. # Enables: MIME, Base64, OutlookExpress (mailboxes), TnefAttachmentHandling, # VbFiltering. GrpInternet: 1 # Microsoft Office file formats. # Enables: formats with VBA ie PPA, VBA5p. GrpMSOffice: 1 # File formats that do not fall into any of the above categories # Enables: Base64, ITSS (Microsoft Compressed Help files (.chm, .hxs)) GrpMisc: 2 # All "clean" file formats. # Certain file formats (eg. .bmp bitmap files) cannot contain viruses. This # option enables files of the corresponding types to be positively identified # and scanning of them to be stopped. GrpClean: 2 #Any option that is part of a group is also included in this group. GrpSuper: 2 # Enables or disables disinfection of all files for which disinfection is # supported GrpDisinfect: 2 # Causes scanning to be aborted for files (e.g. "zip bombs") whose # characteristics cause the Virus Engine to consume excessive # System resource (disc, memory, CPU). # Note -- On rare occasions it may be possible for an innocent file # to trigger the AutoStop detection (a "false positive"). However, files # causing SAVI to return ...SCAN_ABORTED should initially be treated # in the same way as one containing a virus. EnableAutoStop: 1