On 4/22/10 5:03 PM, Noel Jones wrote:
> With clamav (and likely other virus scanners), it's necessary
> for the scanner to see the whole message for some signatures
> to match. Normally one would just set $bypass_decode_parts =
> 1 for this.
>
actually, there is a way to do this.
I use this, don't remember what else I did, but all the 'sanesecurity'
tests pass. and banned attachment blocking, bouncekiller, all work.
$bypass_decode_parts = 0;
and change av scanners to this: (gets the whole email)
@av_scanners = (
['ClamAV-clamd',
\&ask_daemon, ["CONTSCAN {}/../email.txt\n", "/var/run/clamav/clamd"],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);
> But banned attachment blocking, bounce killer, and maybe other
> features require decoding, so that means setting
> $bypass_decode_parts = 0; and adding '^MAIL$' to
> @keep_decoded_original_maps.
>
> This results in the virus scanner processing the message
> twice; once for the full mail, and then again each of the
> decoded parts.
>
> It would be nice if there were a switch, "bypass_parts_scan"
> or such, that turns off virus scanning of the decoded parts.
>
> Is this possible and does this sound generally useful?
>
> -- Noel Jones
>
> ------------------------------------------------------------------------------
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
>
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
------------------------------------------------------------------------------
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
