I have setup in my exim.conf file 

av_scanner = cmdline:/usr/local/bin/esets_cli --subdir %s:* : virus= : "(+.)"

i've tried different permutations but still can;t seem to get it to work.  




ACL
deny message = This message contains malware ($malware_name)
     demime = *
     malware = *

the output on the commandline is as follows

/usr/local/bin/esets_cli --subdir /home/*
/usr/home/eicar.zip: action="discarded"
/usr/home/eicar.zip: virus="Eicar test file"
/usr/home/eicar.zip >> ZIP >> eicar.com: virus="Eicar test file"

So I should be seeing in my exim logs a line that says This message contains 
malware Eicar test file and the deny.  But all I get is 

9805 check demime = *
 9805 check malware = *
 9805 deny: condition test failed
 9805 processing "accept"
 9805 accept: condition test succeeded
 9805 unspool_mbox(): unlinking 
'/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8.eml'
 9805 unspool_mbox(): unlinking 
'/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00000.com'
 9805 unspool_mbox(): unlinking 
'/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00001.com'
 9805 unspool_mbox(): unlinking 
'/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00000.zip'
 9805 unspool_mbox(): unlinking 
'/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8_scanner_output'
 9805 calling local_scan(); timeout=300
 9805 local_scan() returned 0 NULL

I am pretty sure it is because of the definiton in the av_scanner.  Can someone 
maybe help me with av_scanner definition.

Thanks in advance.....

_________________________________________________________________
Get free photo software from Windows Live
http://www.windowslive.com/online/photos?ocid=PID23393::T:WLMTAGL:ON:WL:en-US:SI_PH_software:082009
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to