Julio Maidanik said:
>
>
> Hi,
> I have found that adding clamav checking through maildrop is quite easy.
> It is so simple, that I would believe it might be useful for other people,
> and so I am offering it to included in the clamav's contrib
> subdirectory.
>
> CLAMOUT=`/usr/local/bin/clamdscan --stdout - 2>&1`
> log $CLAMOUT if ($RETURNCODE) { # A virus was found. You may, for example
> deliver the message to a special "quarantine" account
> to "[EMAIL PROTECTED]" }
> else { # OK
> }
Instead of this, I use a simple script called clamassassin:
http://drivel.com/clamassassin/
You can call it via a xfilter:
xfilter '/usr/bin/clamassassin'
and it will add headers like this:
X-Virus-Status: Yes
X-Virus-Report: Worm.Mytob.T FOUND
X-Virus-Checker-Version: clamassassin 1.2.2 with clamdscan / ClamAV
0.86.2/995/Wed Jul 27 16:13:50 2005
so then do a simple:
if (/^X-Virus-Status: Yes/:h)
{
to '/an/admins/subfolder/for/fp/checking/'
}
I immediately pull out all Viruses because in 2 years I've yet to get a FP
from ClamAV. Logging is done by clamd and clean messages can be logged by
setting LogClean in /etc/clamd.conf
Jay
--
Jay Lee
Network / Systems Administrator
Information Technology Dept.
Philadelphia Biblical University
--
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
