mailrust looks at every attachment before a person saves it, and names the dangerous ones in the email itself.
What people see
| Mark | What it means |
|---|---|
| a program | A file that runs on its own: an installer, a script, a shortcut |
| disguised | A program pretending to be a document, for example invoice.pdf.exe |
| locked archive | An archive with a password, which no antivirus can look into |
Saving a marked file asks first. With an antivirus connected, files also show checked by antivirus, virus: with the name of what was found, or not checked: too large.
Ban programs
Admin → Attachments → Do not allow downloading programs from emails keeps programs, disguised files and archives with a program inside in the email: they are listed, but nobody can save them.
Antivirus
mailrust can send attachments to ClamAV for a check before they are opened or saved. Install ClamAV with its clamd service on the server or nearby, then enter its address under Admin → Attachments → Antivirus address (clamd):
| Address | Example |
|---|---|
| A socket | /run/clamav/clamd.ctl |
| Host and port | 127.0.0.1:3310 |
mailrust saves the address only if ClamAV answers there. The Overview shows whether it still answers; while it does not, files go unchecked and the Overview says so.