Stephen wrote: >>And in the @av_scanners_backup section, insure the command line >>version is not commented out: >> >> ### http://www.f-prot.com/ - backs up F-Prot Daemon >> ['FRISK F-Prot Antivirus', ['f-prot','f-prot.sh'], >> '-dumb -archive -packed {}', [0,8], [3,6], >> qr/Infection: (.+)|\s+contains\s+(.+)$/ ], >> >>amavisd-new should simply use it. If you like, I suppose you could >>move the command line version from the backup section, to the primary >>section, but I believe this would be cosmetic only. >> >>Gary V
> Unless there is more than 1 AV scanner installed. I believe the > primary/backup location becomes important if more than 1 scanner is > enabled as Amavis will only use primary scanners then fall back to > backup scanners if no primary is found. > So if using say F-Prot and ClamAV, if Amavis picks up ClamAV in the > primary section it will only use F-prot as a backup (as that is where > the workstation version is defined) if ClamAV fails, in > the order they are found in the backup section. > Then again my understanding here could be misplaced. > SteveC Sounds good. Backups will only be tried if all primary scanners fail. So it is a good idea to have all the daemonized scanners tried first. Especially when a vendor offers both versions. My comment was assuming no other virus scanning programs were installed. If you are only using one scanner, regardless of whether that scanner is daemonized or not, it might save the lookup into the backup scanners section if it is placed in the primary section. # If no virus scanners from the @av_scanners list produce 'clean' nor # 'infected' status (i.e. they all fail to run or the list is empty), # then _all_ scanners from the @av_scanners_backup list are tried # (again, subject to $first_infected_stops_scan). When there are both # daemonized and equivalent or similar command-line scanners available, # it is customary to place slower command-line scanners in the # @av_scanners_backup list. The default choice is somewhat arbitrary, # move entries from one list to another as desired, keeping main scanners # in the primary list to avoid warnings. Assuming we do not have f-prot daemonized version available, it looks like there would also be an advantage to moving f-prot command line version to the primary section even if some other virus scanner is in the primary section. Doing so would insure the message is scanned by more than one engine. It looks like you would want to include all vendors in the primary section, unless you are using daemonized and non-daemonized versions from the same vendor, then you would want to place the slower version from the same vendor in the backup file. Gary V ------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
