On Tue, 19 May 2009, [email protected] wrote:

----------------------------------------------------------------------
Message: 1
From: "Jeff Grossman" <[email protected]>

I am starting to use some third party clamav virus databases and would
like to score the results instead of just delete the e-mail which contains
a hit.  I am not a very good Perl programmer.  Does anybody have any
examples of scoring those results based on the signature name?  If so,
would you be willing to share them with me?

---- Cut Here ----
sub filter_begin
        {
        my($entity) = @_;

        # ...blah blah... #

        # Scan for viruses using ClamAV (clamd)
        my($code, $category, $action) = message_contains_virus_clamd();

        # Look to see if virus was found
        if ($category eq 'virus')
                {
                        # Check to see if it is a specific virus
                        #       $VirusName is a global variable in MIMEDefang
                        #       and was populated by the call to
                        #       message_contains_virus_clamd()
                        if ($VirusName eq 'Signature-Name-Here')
                                {
                                        # Do Whatever
                                }
                }

        # ...blah blah... #

        }
---- Cut Here ----
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to