Step 2: Integration into NoSpamProxy

To enable NoSpamProxy® to send email attachments to an ICAP server for scanning, you must enable the ICAP AntiVirus server in the corresponding rule:

1. Open the desired rule for inbound emails.
   
2. Open the Malware scanner action .
   
   
3. On the Engines tab, tick the ICAP AntiVirus server checkbox.
4. Enter the required data.
5. Click Save and close.

You will now find a log on the ICAP server. To open this log, enter the following command on the command line:

nsp@avira:~$ less icap. log

The infestation of an email would also appear in the log:

ALERT: [service_scanner]malware info: 'W2000M/Donoff.aipbpa ; virus ; Contains code of the macro virus W2000M/Donoff.aipbpa'.

To search for all findings, enter the following command:

nsp@avira:~$ grep -HRN "Infected file" icap.*