Em 19/06/2020 13:59, Stefan Bauer escreveu:
I would start by just having a basic script in place that prints/outputs/logs the command line parameters. (print/echo $1...). then you see what is passed to the script.

Stefan

And use EICAR test file to change the line :

# qr/^Infected: (.+)/m,

----------------------------------
    _    Engº Julio Cesar Covolato
   0v0   <[email protected]>
  /(_)\  F: 55-11-99175-9260
   ^ ^   PSI INTERNET
----------------------------------


Am Freitag, 19. Juni 2020 schrieb <[email protected] <mailto:[email protected]>>:

    Hi,

    could someone please explaint to me or point me to the
    documentation of the syntax in the  amavis 15-av_scanners?

    What I´m trying is to make use of the c-icap-client. So I would
    like to pass the email via the ICAP Client to an external ICAP
    Server for scanning.

    My ICAP Example

    #  ['MY AV ICAP Server',
    #  '/usr/bin/c-icap-client','-s response -i 192.168.17.215 -f {}',
    #  [0], [2],
    #  qr/^Infected: (.+)/m,
    #  ],

    It´s not working this way. Although when I execute the
    c-icap-client manually it works fine:

    c-icap-client -s response -i 192.168.1.1 -f sample.pdf

    So what I do not understand is:

    Line 1: that´s just a name , OK.

    Line 2: includes the path to the binary and parameters I want to
    pass, but what is {} ??? Is this where the file will be passed to
    the external application?

    Line 3: What is [0], [2] doing? Should I change it? to what?

    Line 4: And what should I put into the line with "infected" Is
    this the parsing for the output of the icap result?

    I would also like to write my own script or binary, that will get
    emails from amavis to be scanned.

    But I do not know, how the syntax in 15-av_scanners should be, so
    that my script or binary will be executed in the right way.

    Best regards,

     Benjamin


Reply via email to