On Thu, March 6, 2008 18:01, Mark Martinec wrote: > Juan, > >> I understand the configuration (amavisd.conf) to welcome the latest >> from F-Prot is not solidified in the current stable release of >> amavisd-new. I am currently setting up a server for use with F-Prot. >> Any news on when the next version of amavisd-new (2.6.0?) will be out? >> If not, is there a known-good config for this virus scanner? > > These are the f-prot AV entries (old and new) which will go > into 2.5.4 and 2.6.0. They are based of feedback from several people, > and my reading of documentation. Please try it out, comments welcome. > > > ### http://www.f-prot.com/ > ['F-Prot fpscand', # F-PROT Antivirus for BSD/Linux/Solaris, version 6 > \&ask_daemon, > ["SCAN FILE {}/*\n", '127.0.0.1:10200'], > qr/^(0|8|64) /, > qr/^([1235679]|1[01345]) |<[^>:]*(?i)(infected|suspicious|unwanted)/, > qr/(?i)<[^>:]*(?:infected|suspicious|unwanted)[^>:]*: ([^>]*)>/ ], > > ### http://www.f-prot.com/ > ['F-Prot f-protd', # old version > \&ask_daemon, > ["GET {}/*?-dumb%20-archive%20-packed HTTP/1.0\r\n\r\n", > ['127.0.0.1:10200', '127.0.0.1:10201', '127.0.0.1:10202', > '127.0.0.1:10203', '127.0.0.1:10204'] ], > qr/(?i)<summary[^>]*>clean<\/summary>/, > qr/(?i)<summary[^>]*>infected<\/summary>/, > qr/(?i)<name>(.+)<\/name>/ ], > > ### http://www.f-prot.com/ - backs up F-Prot Daemon, V6 > ['F-PROT Antivirus for UNIX', ['fpscan'], > '--report --mount --adware {}', # consider: --applications -s 4 -u 3 > -z 10 > [0,8,64], [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3], > qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/ ], > > ### http://www.f-prot.com/ - backs up F-Prot Daemon (old) > ['FRISK F-Prot Antivirus', ['f-prot','f-prot.sh'], > '-dumb -archive -packed {}', [0,8], [3,6], # or: [0], [3,6,8], > qr/(?:Infection:|security risk named) (.+)|\s+contains\s+(.+)$/ ], > > > > Mark
This is to confirm that the "fpscan" configuration above works fine with my amavisd-new-2.5.3 install. This is on SUSE LINUX 10.0 and with fpscan version 6.2.1. Thanks to Mark for the help. Erik ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
