POP Mail scanning

[Paul1149]

I'm trying, without any luck, to set up Avast to scan my incoming mail. I use a local mailserver, which sits on pop3 port 110, so this is what I've done:

Mail client: incoming server: 127.0.0.1:5005
                 login: <name>:127.0.0.1:5005

Avast4.ini:
[MailScanner]
AutoSetProtection=0
StartPop=1
StartSMTP=0
StartIMAP=0
PopListen=5005
DefaultPopServer=127.0.0.1:110
ShowTrayIcon=1
PassThrough=1
DefaultSmtpServer=127.0.0.1:25
SMTPListen=226
UseDefaultSmtp=0
Log=20

(I don't want to activate SMTP or IMAP scanning. I'm unaware of any port conflicts.)

However, problems abound at every phase. First, my mail client reports no connection can be made. That is because, Second, Avast reports:

05/15/04 19:43:46:   POP  Listening daemon starting
05/15/04 19:43:46:   Cannot start POP listening thread. Error  10049(0x00002741)

What's more, Third, though XP's Task Manager has AshMaiSv.exe running, my Kerio firewall doesn't show it at all, on any ports, so it's no wonder my client can't see it either.

Something in fundamentally wrong, but I haven't figured it out.

Paul

[vojtech]

PopListen is bad. Set

PopListen=127.0.0.1:5005
to listen on local interface only

or
PopListen=:5005
to listen on all interfaces

[Paul1149]

OK, that gets me closer. Now I'm getting password errors.

I caught another mistake, and changed my account login name to admin#127.0.0.1:5005, admin being the account name. But the password isn't working. I get a password dialog query, but the password isn't accepted. In the mail client, POP has its own password setting, though the pw is the same as the smtp.

Thanks.

[vojtech]

The username 'admin#127.0.0.1:5005' is not good if you want to receive mail from the local mail server that listens on port 110. I think it should be 'admin#127.0.0.1:110', or just 'admin' - it this case it will use the DefaultPopServer (which is 127.0.0.1:110 too).

[Paul1149]

That did it. Changed it simply to 'admin', letting the default port spec take over. Thanks very much!

[Paul1149]

Ok, everything seems to be working, but Avast passed a zipped netskiy .pif file. To double check, I reset Avast to scan archives. It then caught the saved attachment. Good so far.

But then I resent the virus to myself, and Avast did not catch it coming in.

I know ashmail is running and configured, otherwise I would not be able to pull mail between client and local server. So what do I do now? There is no GUI for ashmail, only the wizard, and I don't see further settings there.

TIA.

[Lisandro]

There is no GUI for ashmail, only the wizard, and I don't see further settings there.

Paul, the GUI that you are looking for is probably the Internet Mail Provider settings:
Left click on the 'a' blue ball at system tray and let us know if it what you were looking for  

[Paul1149]

Problem is, I don't have a tasktray icon. Even when the GUI is open. Guess it's because I don't activate boot scanning? Even after I set resident scanning to Standard, no icon. So I'm at an impasse. Program and database are up to the minute.

Avast is nailing the netsky durin normal scans, just not in email scans.

TIA

[Paul1149]

BTW, I'm running XP Home. Thanks.

[Paul1149]

Ok, my problems were due to having taken avast out of Startup. I reinstalled, and have the tasktray icon, with its interface - nice. I resent the virus to myself, and Avast caught it. We're in business.

One question: why does Avast flag twice for a virus alone in a zip file?

Thanks.

[DavidR]

One question: why does Avast flag twice for a virus alone in a zip file?

Thanks.

I'm not sure what you mean by flag twice, but her goes. Avast Mail Protection doesn't know you are sending the mail to yourself.

So depending on your settings it will flag the outbound email as containing a virus. When you download the email you sent from your email server, it doesn't know or care who sent it, just that it contains a virus and will flag the Inbound email as containing a virus.

So if you send and infected email to yourself, you will get an outbound virus warning followed by an inbound virus warning.

I hope that is what you were asking???

[Paul1149]

That was what I was asking, about getting warnings, but I don't have Avast checking SMTP; both alerts are in regard to incoming POP. Avast only checks my mail client (Opera), and not my mail server (Hamster). In all cases there has been only one attachment in the mail. I think in all cases it was a zip of the netsky .pif alone. I don't _think_ one flag was for the .pif and the other for the .zip, but I'm not totally sure on that.

BTW, the popup progress bar is a really nice bonus; functions as a Bat-style mail ticker. Excellent work. Impressed.

Thanks.

[DavidR]

Perhaps if you post the text (not the full email) of the two indound warnings someone will be able to help further.

[Paul1149]

Oh no, they weren't email alerts, they were popup dialogs. So as far as I know I have no record of them. Nothing in the lastest logs either.