1) Does ASSP decode mim and place mime parts in the filescan directory 2) Does ASSP call the filescan command for each mime part or just once and expects that the scanner will scan all files in the dir/subdir? 3) I am confused about the "good" and "bad" and how that relates to a) scoring and the SuspiciousVirus variable 4) Since my AV returns 1, 0 or UNKNOWN there appears to be an inability to use the SuspiciousVirus regex to score since there is no distinction between clamav sigs and filescan responses. What can I do to differentiate?
TIA, Tom ------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do more in less time with Central http://p.sf.net/sfu/logmein12331_d2d _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test