Anders Norrbring skrev:
> Gary V skrev:
>> Anders wrote:
>>
>>> Also, the manual (pdf) gives ambigous information about suspected files,
>>> at some places it lists "SUSPICION" and at other places "SUSPICIOUS", so 
>>> my suggestion is to include both in e grep. I guess it would be a good 
>>> idea to do that on the mail server version (aveclient) as well.
>> FWIW, looking at the binary, I see:
>> [EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL 
>> PROTECTED]@PROTECTED^
>>
>>> Here are the exit codes from the man page:
>> Doh! I was wondering where they were!
>>
>> >From kavscanner -h
>> -R/r Turn on/off recursive scanning (default on)
>>
>> >From the man page:
>> -r     turn on recursive directory scanning.
>> -R     turn off recursive directory scanning.
>>
>> Umm...
>>
>> Gary V
> 
> Weird indeed.. A quick test shows me that -r DISABLE recursive, and -R 
> ENable it...
> 
> Time to file a bug report for inconstency.. ;)


I'd say that the Kaspersky AV section should be changed, just in case..

Old:
   ### http://www.kaspersky.com/
   ['Kaspersky Antivirus v5.5',
     ['/opt/kav/5.5/kav4unix/bin/kavscanner',
      '/opt/kav/5.5/kav4mailservers/bin/kavscanner','kavscanner'],
     '-i0 -xn -xp -mn -R -ePASBME {}/*', [0,10,15], [5,20,21,25],
     qr/(?:INFECTED|WARNING|SUSPICION) (.*)/ ,
     sub {chdir('/opt/kav/bin') or die "Can't chdir to kav: $!"},
     sub {chdir($TEMPBASE) or die "Can't chdir back to $TEMPBASE $!"},
   ],


New, safer:
   ### http://www.kaspersky.com/
   ['Kaspersky Antivirus v5.5',
     ['/opt/kav/5.5/kav4unix/bin/kavscanner',
      '/opt/kav/5.5/kav4mailservers/bin/kavscanner','kavscanner'],
     '-i0 -xn -xp -mn -R -ePASBME {}/*', [0,10,15], [5,20,21,25],
     qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.*)/ ,
     sub {chdir('/opt/kav/bin') or die "Can't chdir to kav: $!"},
     sub {chdir($TEMPBASE) or die "Can't chdir back to $TEMPBASE $!"},
   ],



-- 

Anders Norrbring
Norrbring Consulting

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to