On Wednesday 07 September 2005 03:36 pm, Clifton Royston wrote: > On Wed, Sep 07, 2005 at 03:18:11PM -0400, Rene Bouchard wrote: > > Hi ! I need your help.. > > > > I am actually using amavisd-new 2.3.2 with spamassassin 3.0.4 and clamav > > 0.86.2. I need to search each mail going through my server (including the > > attachment file) and to look for specific word (let say word in a .txt > > files).. > > > > Are you aware if there is a way to do it ? I know I cannot use > > spamassassin because it do not include the attachment, > > I believe SA does scan attachments, at least as configured with > amavisd-new. > > >as for clamav that do no support > > custom rules... Does any body have the same needs and already know the > > solution ? > > One way to do this is to write your own scanner script and add it > into the virus scanner list. It will then get invoked with access to > the attachments as MIME-decoded by amavisd, so that you don't need to > include the decode logic in your script. > > People were doing this for some of the JPEG vulnerabilities last > year, before virus scanners began picking up malicious JPEGs - you > might be able to use one of those scripts as an example. > > -- Clifton Hi,
first, thanks a lot for your help ! Do you think it would worth the effort to modify clamav's source code to do it since it will make the process faster than a custom scanner script ? I've checked and i'm pretty sure spamassassin do not support content filtering. It is not suppose to open the attachment. thanks, Rene ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
