On Thu, Mar 11, 2004 at 10:59:40PM +0000, Karis Matik wrote:
> This is my installed amavis and clamd:
>
> amavisd-new-0.20030616-10mdk
> clamav-db-0.66-0.20031204.1mdk
> libclamav1-0.66-0.20031204.1mdk
> clamav-0.66-0.20031204.1mdk
> clamdmail-0.15-1mdk
> clamd-0.66-0.20031204.1mdk
>
> I applied the patch from Mark Martinec (reference:
> http://marc.theaimsgroup.com/?l=amavis-user&m=107826666706748&w=2)
> ------------------
> --- amavisd~ Mon Jan 5 02:00:19 2004
> +++ amavisd Tue Mar 2 22:49:15 2004
> @@ -5307,4 +5307,12 @@
> }
> $which_section = "virus_scan";
> + # special case to preserve complete mail file for inspection
> + if (lookup('MAIL',$keep_decoded_original_re)) {
> + # keep the original email.txt by making a hard link
> + # to it in ./parts/
> + link("$tempdir/email.txt", "$tempdir/parts/email.txt")
> + or die "Can't create hard link $tempdir/email.txt: $!";
> + do_log(4, "providing full original message to scanners");
> + }
> # some virus scanners behave badly if interrupted,
> # so for now just turn off the timer
> ------------------
>
> Got an attachment contain Bagle-F zippwd with the name: Info.zip. When I test the
> attachment, clam still allows the mail to get through. Anyone has similar problem
> and solution?
>
This patch worked fine for me.
(I've since upgraded to the -p8 release, which also works fine)
Did you remember to edit amavisd.conf and add MAIL to the
$keep_decoded_original parameter? That is required to activate
this feature.
$keep_decoded_original_re = new_RE(
qr'^MAIL$', # retain full original message for virus checking
qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
);
--
Noel Jones
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
