On Wed, Sep 07, 2005 at 03:18:11PM -0400, Rene Bouchard wrote:
> Hi ! I need your help..
>
> I am actually using amavisd-new 2.3.2 with spamassassin 3.0.4 and clamav
> 0.86.2. I need to search each mail going through my server (including the
> attachment file) and to look for specific word (let say word in a .txt
> files)..
>
> Are you aware if there is a way to do it ? I know I cannot use spamassassin
> because it do not include the attachment,
I believe SA does scan attachments, at least as configured with
amavisd-new.
>as for clamav that do no support
> custom rules... Does any body have the same needs and already know the
> solution ?
One way to do this is to write your own scanner script and add it
into the virus scanner list. It will then get invoked with access to
the attachments as MIME-decoded by amavisd, so that you don't need to
include the decode logic in your script.
People were doing this for some of the JPEG vulnerabilities last
year, before virus scanners began picking up malicious JPEGs - you
might be able to use one of those scripts as an example.
-- Clifton
--
Clifton Royston -- [EMAIL PROTECTED]
Tiki Technologies Lead Programmer/Software Architect
"My own personal theory is that this is the very dawn of the world.
We're hardly more than an eyeblink away from the fall of Troy, and
scarcely an interglaciation removed from the Altamira cave painters. We
live in extremely interesting ancient times.
I like this idea. It encourages us to be earnest and ingenious and
brave, as befits ancestral peoples; but keeps us from deciding that
because we don't know all the answers, they must be unknowable and thus
unprofitable to pursue." -- Teresa Nielsen Hayden, 1995
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
