<?xml version="1.0" encoding="ISO-8859-1"?>
<template>

<config>

	<section name="onaccess" label="On-Access Settings">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />

		<subsection label="Mode">
			<parameter name="mode"
			           label="On Access Mode"
			           value="auto"
			           type="C"
			           listelements="automatically=auto;enable=yes;disable=no"
			           help=
"If On Access Mode is enabled scanner reacts on file access.\n
If it is disabled scanner is just available for manual scans and does not guarding the system automatically. " />
		</subsection>

		<subsection label="Scan Path">
			<parameter name="includepath"
			           label="Include Paths"
			           value="/home"
			           type="S"
			           validation="^$|^/[^:]+(:/[^:]+)*$"
			           help=
"These are directories where files may be scanned. All sub-directories are\n
automatically included. Do only use albsolute paths. The directories should be\n
separated using &quot;:&quot; (colon).\n
 For example,\n
/home:/tmp:/var/tmp" />
		</subsection>

		<subsection label="Exclude Settings">
			<parameter name="excludepath"
			           label="Exclude Paths"
			           value=""
			           type="S"
			           validation="^/.*$|^$"
			           help=
"These are directories where files will NOT be scanned. All sub-directories are\n
also NOT scanned.  Do only use albsolute paths. The directories should be\n
separated using &quot;:&quot; (colon).\n
 For example,\n
/dev:/proc" />

			<parameter name="onacc_excludepattern"
			           label="Exclude Pattern"
			           value=""
			           type="S"
			           help=
"Additional to the Exclude Paths it is possible to specify an Exclude\n
Pattern. You also can add files/directories that should NOT be scanned.\n
Instead of a colon separated list like Exclude Paths you need to specify\n
the Exclude Pattern with a Perl-compatible regular expression (PCRE).\n
\n
  ATTENTION: No syntax check is done and no restriction is applied on the\n
pattern specification, all that's required is that it compiles successfully\n
as a Perl-compatible regular expression.\n
If avguard does not start check the logfile for more information." />

			<parameter name="onacc_excludeext"
			           label="Exclude Extensions"
			           value=""
			           type="S"
			           help=
"Specify file extensions that should be excluded in scans. The option takes a\n
colon separated list of file suffixes.\n
  For example,\n
exe:com:zip:tar.bz2" />
		</subsection>

		<subsection label="Handling Concerning Files">
			<parameter name="repairconcerningfiles"
			           label="Try To Repair Concerning Files"
			           value="0"
			           type="B"
			           help="RepairConcerningFiles - try to remove the problem from the\nfile being accessed. If this is successfully done, the desired\naccess will be granted. If it fails, file access will be\nblocked." />

			<parameter name="AlertAction"
			           label="Action for Concerning Files"
			           value="none"
			           type="C"
			           listelements="none=none;rename=rename;delete=delete;quarantine=quarantine"
			           help="If the option RepairConcerningFiles was not set or the problem is\nnot removeable then do one of the following with the concerning\nfile. Please use only one of the following options as the last one\nwill be taken." />
			
			<parameter name="QuarantineDir"
			           label="Quarantine Directory"
			           value="/home/quarantine"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           help="For MoveConcerningFilesTo a\nparameter is required that specifies the directory where the\nfiles will be moved to. The directory will be created if it\ndoes not already exist. Do only use albsolute paths." />
		</subsection>
		<subsection label="Dazuko" >
			<parameter name="onacc_dazukoversion"
			           label="Dazuko Version"
			           value="auto"
			           type="C"
			           listelements="auto=auto;2=2;3=3"
			           help=
"" />
		</subsection>
	</section>

	<section name="extended" label="Extended Settings">
		<subsection label="Archive Settings">
			<parameter name="ArchiveScan"
			           label="Scan Archives"
			           value="1"
			           type="M"
			           help="Compressed files can be scanned on access if the\nArchiveScan directive is given. Default is not\nto scan compressed files on access." />

			<parameter name="mailboxscan"
			           label="Scan in mailbox folders"	
			           value="1"
			           type="B"
			           help="scan mailbox folders, too (might be time consuming!)"/>

			<parameter name="ArchiveMaxSize"
			           label="Archive Max Size"
			           value="1GB"
			           type="S"
			           validation="^(\d+([k,K]|[m,M]|[g,G])[b,B])|0$"
			           help="If compressed files are being scanned, a maximum\nsize (in bytes) can be set. Files (or compressed\ncontents) larger than this size will not be scanned.\nA value of 0 means no maximum size." />

			<parameter name="ArchiveMaxRecursion"
			           label="Archive Max Recursion"
			           value="20"
			           type="N"
			           help="If compressed files are being scanned, a maximum\nuncompression recursion limit can be set. A value\nof 0 means no limit." />

			<parameter name="ArchiveMaxRatio"
			           label="Archive Max Ratio"
			           value="150"
			           type="N"
			           help="If compressed files are being scanned, a maximum\nuncompression ratio limit can be set. A value\nof 0 means no limit." />

			<parameter name="onacc_archivemaxcount"
			           label="Archive Max Count"
			           value="0"
			           type="N"
			           help=
"The maximum number of files to be scanned per archive. If the archive contains\n
ArchiveMaxCount files or more, all the remaining files are skipped from scanning.\n
A value of 0 means all files will be scanned." />

			<parameter name="onacc_maxreportsperfile"
			           label="Max Reports Per File"
			           value="100"
			           type="N"
			           help=
"The upper limit of messages that are issued per scanned file. This setting\n
can be used to prevent the scanner from Denial Of Service attacks generated\n
by crafted archives that otherwise would provoke millions of alerts.\n
A value of 0 means to disable any limit." />

			<parameter name="onacc_ArchiveMaxSizeAction"
			           label="Archive Max Size Action"
			           value="block"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help=
"Perform the specified action if ArchiveMaxSize triggers."/>

			<parameter name="onacc_ArchiveMaxRecursionAction"
			           label="Archive Max Recursion Action"
			           value="block"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help=
"Perform the specified action if ArchiveMaxRecursion triggers."/>

			<parameter name="onacc_ArchiveMaxRatioAction"
			           label="Archive Max Ratio Action"
			           value="block"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help=
"Perform the specified action if ArchiveMaxRatio triggers."/>

			<parameter name="onacc_ArchiveMaxCountAction"
			           label="Archive Max Count Action"
			           value="block"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help=
"Perform the specified action if ArchiveMaxCount triggers."/>

			<parameter name="onacc_ArchiveEncryptedAction"
			           label="Archive Encrypted Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if the scanned archive is encrypted."/>

			<parameter name="onacc_ArchiveMultiVolumeAction"
			           label="Archive Mulivolume Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if the scanned archive is a MultiVolume archive."/>

			<parameter name="onacc_ArchiveUnsupportedAction"
			           label="Archive Unsupported Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if the scanning this archive type is not supported."/>

			<parameter name="onacc_ArchiveHeaderMalformedAction"
			           label="Archive Header Malformed Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if scanner detects that the archive header is malformed."/>

			<parameter name="onacc_ArchiveBombAction"
			           label="Archive Bomb Action"
			           value="block"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if an archive bomb is detected."/>

			<parameter name="onacc_ArchiveProcErrorAction"
			           label="Archive Processing Error Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if a processing error occured."/>

		</subsection>

		<subsection label="Log Settings">
			<parameter name="EmailTo"
			           label="Email Address"
			           value=""
			           type="S"
			           validation="^([\w.\-_]+@[\w.\-_]+)?$"
			           help="You can receive email notifications of alerts using this\ndirective. You must specify the email address to which the\nnotification will be sent. There is no default value for\nthis directive." />

			<parameter name="suppressnotificationbelow"
			           label="Notification Level"
			           value="warning"
			           type="C"
			           listelements="Notice=notice;Information=information;Warning=warning;Error=Error;Alert=alert;"
			           help="This filed controls sending of email notifications. Notifications below the set level will be ignored." />
			
			<parameter name="logfile"
			           label="Log File"
			           value="/var/log/avguard.log"
			           validation="^([/]?([^|*&amp;&apos;&lt;&gt;&quot;#:]{1,255}[/])*[^|*&amp;&apos;&lt;&gt;&quot;#:]{1,255})?$"
			           type="S"
			           help="Concerning activity may also be logged to a specified file\n(in addition to syslog). You must specify the file. Otherwise there is no logfile written." />
			
			<parameter name="SyslogFacility"
			           label="Syslog Facility"
			           value="user"
			           type="C"
			           listelements="auth=auth;authpriv=authpriv;cron=cron;daemon=daemon;kern=kern;local0=local0;local1=local1;local2=local2;local3=local3;local4=local4;local5=local5;local6=local6;local7=local7;lpr=lpr;mail=mail;news=news;syslog=syslog;user=user;uucp=uucp"
			           help="Regardless of the above configuration settings, AvServer will \nalways log important information using syslog. It is possible \nto specify which syslog facility you would like AvServer to \nuse." />
			
			<parameter name="SyslogPriority"
			           label="Syslog Priority"
			           value="notice"
			           type="S"
			           validation="^([^|*&amp;&apos;&lt;&gt;&quot;#\s])+$"
			           help="Regardless of the other configuration settings, AntiVir\nwill always log important information using syslog. It\nis possible to specify which syslog priority\nyou would like AntiVir to use. If not given,\nthe default value is &quot;notice&quot;." />
		</subsection>

		<subsection label="SNMP Traps">
			<parameter name="onacc_sendsnmptraps"
			           label="Send SNMP Traps"
			           value="0"
			           type="M"
			           help=
"Defines whether SNMP traps should be sent when avguard starts up, goes down,\n
detects license issues, applies VDF updates or changes state. Also notify\n
about alerts and important warnings via SNMP." />

			<parameter name="onacc_snmpverbositylevel"
			           label="SNMP Verbosity Level"
			           value="snmp"
			           type="C"
			           listelements="notice=notice;information=information;warning=warning;error=error;alert=alert;snmp=snmp"
			           help=
"Defines for which issues SNMP traps should be sent when files are scanned." />
			
			<parameter name="onacc_snmprecipient"
			           label="SNMP Recipient"
			           value="localhost"
			           validation="^.+$"
			           type="S"
			           help=
"Defines the recipient of the SNMP trap. Please specify an hostname or\n
an ip-address to which the traps are sent." />
		</subsection>

		<subsection label="Various Settings">
			<parameter name="numdaemons"
			           label="Number of Scan Daemons"
			           value="3"
			           type="S"
			           validation="^(([^12\sa-zA-Z])|(1\d)|(20)){0,2}$"
			           help="Number of avguard daemons to be launched at once.\nA workstation typically does not require more than\n3 daemons. File/HTTP servers may require more.\nPossible values are 0 .. 20, default is 3.\nA value of 0 disables avguard." />

			<parameter name="externalprogram"
			           label="External Program"
			           value=""
			           type="S"
			           validation="^/.*$|^$"
			           help=
"Run an external program for each concerning file found. You may\n
use macros to pass as arguments for the program.\n
%h - path to file (may contain spaces)\n
%f - filename only (may contain spaces)\n
%p - full name of file (%h/%f) (may contain spaces)\n
%U - UID of file\n
%G - GID of file\n
%s - size of file\n
%m - mode of file\n
%De - event type\n
%DF - device\n
%Dp - operation PID\n
%Du - operation UID\n
%Df - operation flags\n
%Dm - operation mode\n
%Sn - name of alert\n
%Sa - additional alert information\n
Note: Dazuko 2.0.0 or higher is required in order to use this\n
feature." />

			<parameter name="activelockfile"
			           label="Active Lock File"
			           value="/var/lock/LCK..avguard"
			           type="S"
			           validation="^([/]([^|*&amp;&apos;&lt;&gt;&quot;#:]{1,255}[/]?)*([^|*&amp;&apos;&lt;&gt;&quot;#:]{1,255}[/])?[:]?)?$"
			           help="Specify a filename which avuard should try to get a lock on so that other software on the machine can determinate avguards processes." />
			
			<parameter name="temporarydirectory"
			           label="Temporary Directory"
			           value="/tmp"
			           type="S"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           help="Defines the path of the temporary directory; shall be an absolute path" />
		</subsection>
	</section>
	
	<section name="scanner" label="Scanner Settings">
		<subsection label="Scan Settings">
			<parameter name="scanmode"
			           label="Scan Mode"
			           value="all"
			           type="C"
			           listelements="smart=smart;all files=all;extension list=extlist;"
			           help="This setting determines the scan mode behavior.\nIn &quot;all files&quot; mode, all files regardless of their\nextension and type, will be scanned.\nIn &quot;extlist&quot; mode, file will be scanned if it has a known extension.\nIn &quot;smart&quot; mode, AntiVir Server Guard will scan every file from the default extension list,\notherwise it tries to detect the file type prior to file content in order\nto decide if the file should be scanned.\nThe default setting is the &quot;smart&quot; scan mode." />
		</subsection>

		<subsection label="Heuristics">
			<parameter name="HeuristicsMacro"
			           label="Enable Macro Heuristics"
			           value="1"
			           type="B"
			           help="AntiVir is capable of using heuristics to determine if a file\nmay be malicious. This allows new or unknown malicious code to\nbe detected before you have had a chance to perform an update.\nThere are two types of heuristics that AntiVir uses. The\nfirst, HeuristicsMacro, only deals with macros in office\ndocuments." />

			<parameter name="HeuristicsLevel"
			           label="Heuristics Level"
			           value="1"
			           type="C"
			           listelements="0=0;1=1;2=2;3=3;"
			           help="HeuristicsLevel, deals with all types of files and\ncan be set to a certain level of intensity (0-3). 0 means\ndisabled and 3 means full intensity.\nNote: Be aware that setting the HeuristicsLevel too high could\nresult in false alerts." />
		</subsection>

		<subsection label="Detect Prefixes">
			<parameter name="detectprefixes_adspy"
			           label="Detect Advertising (ADSPY)"
			           value="1"
			           type="B"
			           help="Software that displays advertising pop-ups or software that very\noften without the user's consent sends user specific data to\nthird parties and might therefore be unwanted." />

			<parameter name="detectprefixes_appl"
			           label="Detect Application (APPL)"
			           value="0"
			           type="B"
			           help="The term APPL denotes an application of dubious origin or which\nmight be hazardous to use." />

			<parameter name="detectprefixes_bdc"
			           label="Detect Back Door Client (BDC)"
			           value="1"
			           type="B"
			           help="Is the Control software for backdoors. Control software for\nbackdoors are generally harmless." />

			<parameter name="detectprefixes_dial"
			           label="Detect Dialer (DIAL)"
			           value="1"
			           type="B"
			           help="A Dial-Up program for connections that charge a fee. Its use might\nlead to huge costs for the user." />

			<parameter name="detectprefixes_game"
			           label="Detect Games (GAME)"
			           value="0"
			           type="B"
			           help="It concerns a game that causes no damage on your computer." />

			<parameter name="detectprefixes_heur-dblext"
			           label="Detect Cloudy Extensions (HEUR-DBLEXT)"
			           value="1"
			           type="B"
			           help="File has an executable file extension but hides it behind a\nharmless one." />

			<parameter name="detectprefixes_joke"
			           value="0"
			           type="B"
			           label="Detect Joke Programs (JOKE)"
			           help="A harmless joke program is present as file." />

			<parameter name="detectprefixes_pck"
			           value="0"
			           type="B"
			           label="Detect Runtime Packer (PCK)"
			           help="File has been compressed with an unusual runtime compression tool.\nPlease make sure that this file comes from a trustworthy source." />

			<parameter name="detectprefixes_phish"
			           value="1"
			           type="B"
			           label="Detect Phishing (PHISH)"
			           help="Faked Emails that are supposed to prompt the victim to reveal\nconfidential information such as user accounts, passwords or\nonline-banking data on certain websites." />

			<parameter name="detectprefixes_spr"
			           value="0"
			           type="B"
			           label="Detect Spyware (SPR)"
			           help="Software that maybe able to compromise the security of your system,\ninitiate unwanted program activities, damage your privacy or spy\nout your user behaviour and might therefore be unwanted." />
		</subsection>
		<subsection label="Scanner Alert Actions" >
			<parameter name="onacc_ScanIncompleteAction"
			           label="Scan Incomplete Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if the ScanIncomplete condition triggers."/>

			<parameter name="onacc_TaggedSuspiciousAction"
			           label="Tagged Suspicious Action"
			           value="warn"
			           type="C"
			           listelements="ignore=ignore;warn=warn;block=block;alert=alert"
			           help="Perform the specified action if the scan found the file suspicious."/>
		</subsection>
	</section>

	<section name="avupdate" label="Updates">
		<subsection label="Internet updates">
			<parameter name= "avupd_internet-srvs"
			           value=
"http://dl1.pro.antivir.de/,http://dl2.pro.antivir.de/,http://dl3.pro.antivir.de/,http://dl4.pro.antivir.de/,http://dl1.antivir.net/,http://dl2.antivir.net/,http://dl3.antivir.net/"
			           type= "S"
			           validation="^.+$"
			           label="Update Server"
			           help= "The list of Internet update servers, comma separated" />
		</subsection>

		<subsection label="Intranet Updates">
			<parameter name= "avupd_useownserver"
			           value="0"
			           type= "M"
			           label="Use own update server"
			           help=
"Check if you want to use your own update server" />
			
			<parameter name= "avupd_intranet-srvs"
			           value=""
			           type= "S"
			           validation="^.+$"
			           label="Update Server"
			           help= "The list of update servers, comma separated" />
		</subsection>

		<subsection label="Connection Settings">
			<parameter name= "avupd_retries"
			           value="3"
			           type= "N"
			           min=  "1"
			           max=  "65000"
			           label="Retries"
			           help= "Specify the amount of retries in erroneous cases" />

			<parameter name= "avupd_retry-timeout"
			           value="10"
			           type= "N"
			           min=  "0"
			           max=  "65000"
			           label="Retry Timeout"
			           help= "Specify time between retries is seconds" />

			<parameter name= "avupd_receive-timeout"
			           value="10"
			           type= "N"
			           min=  "1"
			           max=  "65000"
			           label="Receive Timeout"
			           help= "Specify time to wait for update server in seconds" />

			<parameter name= "avupd_no-check-md5"
			           value="1"
			           type= "B"
			           label="Check md5"
			           help= "Check md5 sum of local Files" />

			<parameter name= "avupd_temp-dir"
			           value="/tmp/avira_update"
			           type= "S"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           label="Temp Directory"
			           help= "Specify directory for temporary data" />
		</subsection>

		<subsection label="Network">
			<parameter name= "avupd_use-proxy"
			           value="0"
			           type= "M"
			           label="Use Proxyserver"
			           help= "" />
			
			<parameter name= "avupd_proxy-host"
			           value=""
			           type= "H"
			           label="Proxyserver Name"
			           help= "Name of the Proxy Server" />

			<parameter name= "avupd_proxy-port"
			           value=""
			           type= "N"
			           label="Proxyserver Port"
			           help= "Port of the Proxy Server" />

			<parameter name= "avupd_proxy-username"
			           value=""
			           type= "S"
			           validation="^.+$"
			           label="Proxyserver Username"
			           help= "Username for login at the Proxy Server" />

			<parameter name= "avupd_proxy-password"
			           value=""
			           type= "S"
			           label="Proxyserver Password"
			           help= "Password for login at the Proxy Server" />
		</subsection>

		<subsection label="Logging">
			<parameter name= "avupd_log"
			           value="/var/log/avupdate.log"
			           type= "S"
			           validation="^/.+$"
			           errmsg="Only absolute pathes my be specified!"
			           label="Logfile"
			           help= "Specify a name for the Logfile" />

			<parameter name= "avupd_log-append"
			           value="1"
			           type= "B"
			           label="Append Logfile"
			           help= "If set append logfile, else overwrite" />
		</subsection>

		<subsection label="E-Mail Notification">
			<parameter name= "avupd_notify-when"
			           value="1"
			           type= "C"
			           listelements="never=0;always=1;in erroneous case=2;in successful case=3;"
			           label="Send e-mail Notification"
			           help= "Specify when E-Mail Notifications are sent" />

			<parameter name= "avupd_email-to"
			           value="root@localhost"
			           type= "S"
			           validation="^([\w-.]+@[\w-.]+)?$"
			           label="E-Mail address"
			           help= "Receive address for Notification E-Mails" />

			<parameter name= "avupd_smtp-server"
			           value="localhost"
			           type= "H"
			           label="SMTP Server"
			           help= "The SMTP Server for sending E-Mail Notification" />

			<parameter name= "avupd_smtp-port"
			           value="25"
			           type="N"
			           min= "1"
			           max= "65000"
			           label="SMTP Port"
			           help= "The SMTP Port for sending E-Mail Notification" />
		</subsection>

		<subsection label="SMTP Authentification">
			<parameter name= "avupd_auth-method"
			           value="0"
			           type= "M"
			           label="Activate Authentification"
			           help= "Set Checkbox if a SMTP Authentification is required for Notification E-Mails" />

			<parameter name= "avupd_smtp-user"
			           value=""
			           type= "S"
			           validation="^.+$"
			           label="SMTP User"
			           help= "SMTP User is just used when checkbox Activate Authentification is set." />

			<parameter name= "avupd_smtp-password"
			           value=""
			           type= "S"
			           label="SMTP Password"
			           help= "SMTP Password is just used when checkbox Activate Authentification is set." />
		</subsection>
	</section>

	<section name="ondemand" label="On-Demand Settings">
		<subsection label="Basic Settings">
			<parameter name= "ondmd_followsymlinks"
			           label="Follow Symlinks"
			           value="1"
			           type= "B"
			           help= "Toggle the behavior regarding symlink files." />

			<parameter name="ondmd_repairconcerningfiles"
			           label="Try To Repair Concerning Files"
			           value="0"
			           type="B"
			           help=
"Avguard tries to remove the problem from the file.\n
If it fails, the alert action will be triggered." />

			<parameter name="ondmd_QuarantineDir"
			           label="Quarantine Directory"
			           value="/home/quarantine"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           help=
"For Quarantine Directory a parameter is required that specifies the directory\n
where the files will be moved to. The directory will be created if it does not \n
already exist. Do only use albsolute paths." />

			<parameter name="ondmd_TemporaryDirectory"
			           label="Temporary Directory"
			           value="/tmp"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           help=
"Directory where temporary files of avscan are written." />
		</subsection>

		<subsection label="Logging">
			<parameter name="ondmd_LogFile"
			           label="Log File"
			           value="/tmp/avscan.log"
			           validation="^/.*$"
			           errmsg="Only absolute pathes my be specified!"
			           help=
"Concerning activity may also be logged to a specified file (in addition to syslog).\n
  ATTENTION: Make sure you have the proper permissions for writing in the\n
specified location" />

			<parameter name="ondmd_SyslogFacility"
			           label="Syslog Facility"
			           value="user"
			           type="C"
			           listelements="auth=auth;authpriv=authpriv;cron=cron;daemon=daemon;kern=kern;local0=local0;local1=local1;local2=local2;local3=local3;local4=local4;local5=local5;local6=local6;local7=local7;lpr=lpr;mail=mail;news=news;syslog=syslog;user=user;uucp=uucp"
			           help=
"Regardless of the above configuration settings, Avira Guard will always log\n
important information using syslog. This option sets the facility that is used\n
to when logging to syslog." />

			<parameter name="ondmd_SyslogPriority"
			           label="Syslog Priority"
			           value="notice"
			           type="S"
			           validation="^([^|*&amp;&apos;&lt;&gt;&quot;#\s])+$"
			           help=
"Specify the priority that is used when logging to syslog." />

		</subsection>

		<subsection label="SNMP Traps">
			<parameter name="ondmd_sendsnmptraps"
			           label="Send SNMP Traps"
			           value="0"
			           type="M"
			           help=
"Defines whether SNMP traps should be sent when avguard starts up, goes down,\n
detects license issues, applies VDF updates or changes state. Also notify\n
about alerts and important warnings via SNMP." />

			<parameter name="ondmd_snmpverbositylevel"
			           label="SNMP Verbosity Level"
			           value="snmp"
			           type="C"
			           listelements="notice=notice;information=information;warning=warning;error=error;alert=alert;snmp=snmp"
			           help=
"Defines for which issues SNMP traps should be sent when files are scanned." />

			<parameter name="ondmd_snmprecipient"
			           label="SNMP Recipient"
			           value="localhost"
			           validation="^.+$"
			           type="S"
			           help=
"Defines the recipient of the SNMP trap. Please specify an hostname or\n
an ip-address to which the traps are sent." />
		</subsection>
		
		<subsection label="Archive Settings">
			<parameter name="archivescan"
			           label="Scan Archives"
			           value="1"
			           type="M"
			           help=
"Compressed files can be scanned on access if the\n
ArchiveScan directive is given. Default is not\n
to scan compressed files on access." />
			
			<parameter name="scaninmbox"
			           label="Scan in mailbox folders"
			           value="1"
			           type="B"
			           help="scan mailbox folders, too (might be time consuming!)"/>

			<parameter name="archivemaxsize"
			           label="Archive Max Size"
			           value="1GB"
			           type="S"
			           validation="^(\d+([k,K]|[m,M]|[g,G])[b,B])|0$"
			           help=
"If compressed files are being scanned, a maximum\n
size (in bytes) can be set. Files (or compressed\n
contents) larger than this size will not be scanned.\n
A value of 0 means no maximum size." />

			<parameter name="archivemaxrecursion"
			           label="Archive Max Recursion"
			           value="20"
			           type="N"
			           help=
"If compressed files are being scanned, a maximum\n
uncompression recursion limit can be set. A value\n
of 0 means no limit." />

			<parameter name="archivemaxratio"
			           label="Archive Max Ratio"
			           value="150"
			           type="N"
			           help=
"If compressed files are being scanned, a maximum\n
uncompression ratio limit can be set. A value\n
of 0 means no limit." />

			<parameter name="ondmd_archivemaxcount"
			           label="Archive Max Count"
			           value="0"
			           type="N"
			           help=
"The maximum number of files to be scanned per archive. If the archive contains\n
ArchiveMaxCount files or more, all the remaining files are skipped from scanning.\n
A value of 0 means all files will be scanned." />

			<parameter name="ondmd_maxreportsperfile"
			           label="Max Reports Per File"
			           value="100"
			           type="N"
			           help=
"The upper limit of messages that are issued per scanned file. This setting\n
can be used to prevent the scanner from Denial Of Service attacks generated\n
by crafted archives that otherwise would provoke millions of alerts.\n
A value of 0 means to disable any limit." />

		</subsection>

		<subsection label="Heuristics">
			<parameter name="heuristicsmacro"
			           label="Enable Macro Heuristics"
			           value="1"
			           type="B"
			           help=
"AntiVir is capable of using heuristics to determine if a file\n
may be malicious. This allows new or unknown malicious code to\n
be detected before you have had a chance to perform an update.\n
There are two types of heuristics that AntiVir uses. The\n
first, HeuristicsMacro, only deals with macros in office\n
documents." />

			<parameter name="heuristicslevel"
			           label="Heuristics Level"
			           value="1"
			           type="C"
			           listelements="0=0;1=1;2=2;3=3;"
			           help=
"HeuristicsLevel, deals with all types of files and\n
can be set to a certain level of intensity (0-3). 0 means\n
disabled and 3 means full intensity.\n
Note: Be aware that setting the HeuristicsLevel too high could\n
result in false alerts." />
		</subsection>

		<subsection label="Detect Prefixes">
			<parameter name="detectprefixes_adspy"
			           label="Detect Advertising (ADSPY)"
			           value="1"
			           type="B"
			           help=
"Software that displays advertising pop-ups or software that very\n
often without the user's consent sends user specific data to\n
third parties and might therefore be unwanted." />

			<parameter name="detectprefixes_appl"
			           label="Detect Application (APPL)"
			           value="0"
			           type="B"
			           help=
"The term APPL denotes an application of dubious origin or which\n
might be hazardous to use." />

			<parameter name="detectprefixes_bdc"
			           label="Detect Back Door Client (BDC)"
			           value="1"
			           type="B"
			           help=
"Is the Control software for backdoors. Control software for\n
backdoors are generally harmless." />

			<parameter name="detectprefixes_dial"
			           label="Detect Dialer (DIAL)"
			           value="1"
			           type="B"
			           help=
"A Dial-Up program for connections that charge a fee. Its use might\n
lead to huge costs for the user." />

			<parameter name="detectprefixes_game"
			           label="Detect Games (GAME)"
			           value="0"
			           type="B"
			           help="It concerns a game that causes no damage on your computer." />

			<parameter name="detectprefixes_heur-dblext"
			           label="Detect Cloudy Extensions HEUR-DBLEXT"
			           value="1"
			           type="B"
			           help=
"File has an executable file extension but hides it behind a\n
harmless one." />

			<parameter name="detectprefixes_joke"
			           label="Detect Joke Programs (JOKE)"
			           value="0"
			           type="B"
			           help="A harmless joke program is present as file." />

			<parameter name="detectprefixes_pck"
			           label="Detect Runtime Packer (PCK)"
			           value="0"
			           type="B"
			           help=
"File has been compressed with an unusual runtime compression tool.\n
Please make sure that this file comes from a trustworthy source." />

			<parameter name="detectprefixes_phish"
			           label="Detect Phishing (PHISH)"
			           value="1"
			           type="B"
			           help=
"Faked Emails that are supposed to prompt the victim to reveal\n
confidential information such as user accounts, passwords or\n
online-banking data on certain websites." />

			<parameter name="detectprefixes_spr"
			           value="0"
			           type="B"
			           label="Detect Spyware (SPR)"
			           help=
"Software that maybe able to compromise the security of your system,\n
initiate unwanted program activities, damage your privacy or spy\n
out your user behaviour and might therefore be unwanted." />
		</subsection>
	</section>
</config>

<setup>
	<section name="install" label="Installation">
		<parameter name="DestinationPath"
		           value="/usr/lib/AntiVir"
		           type="S"
		           flags="RO"
		           label="Destination Directory" />

		<parameter name="avguard_install"
		           label="Install AvGuard (on-access scanner)"
		           value="1"
		           type="B"
		           flags="RO"
		           help=
"An on-access scanner can be installed.\n
This is a daemon that will run in the background and\n
automatically scan files as they are accessed." />

		<parameter name="avscan_install"
		           label="Install AvScan (on-deman scanner)"
		           value="1"
		           type="B"
		           flags="RO"
		           help=
"An on-demand scanner is a commandline interface to trigger scans on demand." />

		<parameter name="avupdate_install"
		           value="1"
		           type="B"
		           flags="RO"
		           label="Install Avupdate"
		           help=
"Avupdate is tool to download and install updates for Avira Software Products." />

		<parameter name="create_sbin_links"
		           label="Create Links at /usr/sbin"
		           value="1"
		           type="B"
		           flags="RO"
		           help="Create link to the avguard and avscan for easy access." />

		<parameter name="avguard_autostart"
		           value="1"
		           type="B"
		           flags="RO"
		           label="Start AvGuard at Boot"
		           help=
"AvGuard can be started automatically when the\n
system boots." />

		<parameter name="avupdate_cronjob"
		           value="1"
		           type="B"
		           flags="RO"
		           label="Create Avupdate Cronjob"
		           help=
"Create a cronjob to keep the Software up to date." />
	</section>
	<section name="expert" label="Expert">
		<parameter name="dazuko_install"
		           value="1"
		           type="B"
		           label="Install dazuko"
		           help=
"Dazuko is a kernel module which provides interception of file accesses.\n
It is necessary to use AvGuard in on-access mode.\n
If the checkbox is checked SMC tries to install the latest version of Dazuko.\n
That is Version 2 on Solaris or version 3 (also know as dazukoFS) on Linux." />
	</section>
</setup>

<commands>
	<command name="scan" label="Scan">
		<parameter name="version_2010_q1_eu0"
		           label="Version"
		           value="2010/Q1/EU0"
		           type="G" />

		<parameter name="path"
		           label="Scan Directories (&quot;:&quot; as separator)"
		           type="S"
		           validation="^/.*$"
		           value="/home"
		           help=
"A list of directories to scan. The directories should be\n
separated using &quot;:&quot; (colon). For example,\n
/home:/tmp:/var" />

		<parameter name="excludepattern"
		           label="Exclude Pattern"
		           value=""
		           type="S"
		           validation="^/.+$|^$"
		           help=
"Specify files/directories that should NOT be scanned. You need to specify\n
the Exclude Pattern with a Perl-conmpatible regular expression (PCRE).\n
\n
  ATTENTION: No syntax check is done and no restriction is applied on the\n
pattern specification, all that's required is that it compiles successfully\n
as a Perl-compatible regular expression." />

		<parameter name="scanmode"
		           label="Scan Mode"
		           value="smart"
		           type="C"
		           listelements="smart=smart;all files=all;extension list=extlist;"
		           help=
"This setting determines the scan mode behavior.\n
In &quot;all files&quot; mode, all files regardless of their\n
extension and type, will be scanned.\n
In &quot;extlist&quot; mode, file will be scanned if it has a known extension.\n
In &quot;smart&quot; mode, AntiVir Server Guard will scan every file from the default extension list,\n
otherwise it tries to detect the file type prior to file content in order\n
to decide if the file should be scanned.\n
The default setting is the &quot;smart&quot; scan mode." />

		<parameter name="alertaction"
		           label="Action for Concerning Files"
		           value="none"
		           type="C"
		           listelements="none=none;rename=ren;delete=del;quarantine=quarantine"
		           help=
"If the option RepairConcerningFiles was not set or the problem is\n
not removeable then do one of the following with the concerning\n
file. Please use only one of the following options as the last one\n
will be taken." />

		<parameter name="additionalcmdlinevalues"
		           label="Additional Commandline Values"
		           value=""
		           type="S"
		           help=
"If it is necessary you can add additional commandline parameters here.\n
  ATTENTION: Unknown or erroneous parameters can avoid the scan. It is also\n
possible to add commands, which may damage you system! If unsure do not\n
give any additional commands." />
	</command>

	<command name="update_product" label="Update product">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />
	</command>
	
	<command name="update_scanner" label="Update scanner">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />
	</command>
	
	<command name="start" label="Start">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />
	</command>

	<command name="stop" label="Stop">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />
	</command>

	<command name="reload" label="Reload">
		<parameter name="version_2010_q1_eu0"
		           label=""
		           value=""
		           type="G" />
	</command>
</commands>

</template>

<!--
vim:ts=4 nowrap syntax=xml
-->
