Mark Martinec skrev: > Anders, > >> Why not go all the way? Kaspersky Antivirus ... > > Thanks for all the changes, most of them found their way into -rc2. > >> The exit codes listed in the distribution .conf file seems to be a >> little off, I believe that a password protected or corrupted file >> shouldn't be listed as a virus, but be treated as "unknown" and the exit >> code shouldn't be listed at all. Isn't that the correct way? Unlisted >> exit codes makes amavis flag the mail with the >> $undecipherable_subject_tag.. Right? > > No, exit codes from password protected or corrupted files should > either be listed under clear or under infected (depending on ones' > preference), but should probably not be unlisted. When no match > is found in either list, that virus scan is considered to have > failed. If there are other active scanners in the list, their > verdict will be taken. If there are no valid results from any > virus scanner, a temporary failure is declared, mail stays in > the MTA queue until at least one AV scanner gets fixed.
Hmmm... That makes sense.. However, I feel that if all scanners fails in checking (encrypted and password protected files), amavis should issue some kind of warning that it's not checked. If I list those AV hits as clean, the users won't get alerted, and if I list them as infected, the users will never get the mail since I kill all virus mails. I know we had this discussion a while back, I believe it was when 2.3.2 was up for release.. My point of view is still that there should be a 3:rd catch for AV exit codes, even if it'll break backward compatibility and make admins annoyed since they need to reconfigure.. But I know that many admins just kill and discard virus mails, and that'll make "clean" the only option for encrypted files. Which of course may or may not, be clean. -- Anders Norrbring Norrbring Consulting ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
