>
> Hmm -- in a .qmail file, an exit code of 99 is supposed to tell it that the
> delivery was OK, but not to process further delivery instructions. Would
> that be useful in this circumstance? I haven't looked into how AMaViS hooks
> into the qmail system, so I don't know myself.
Hi,
Nope it doesn't, but that gave me an idea. I just modified qmail-rspawn to
return "KMessage containing virus dropped" if qmail-remote exits with 99,
and it works great this way.
Btw, I am implementing this under Solaris and I found that many of the
command-line options had to be modified for the AMaViS script to work.
Also, I found a bunch of the archiver sections had the wrong command-line
options, and the "rm $E" part was often missing (the binhex stuff also had
some problems.) I also modified the email warnings to include the header
of the original email so that the sender can better track down the
offending piece of mail.
Also, I found that the little-endian/big-endian check in zipsecure was
mixed up. I simply swapped the values in each check and this fixed it.
Another big pain was that the /etc/magic file on Solaris is missing a whole
bunch of stuff which caused most archive formats to be unrecognized, so I
had to add a bunch to that (and swap bytes for shorts!).
I've made enough changes now that I'm considering re-implementing it in
perl with a bunch of optimizations and better error-detection. If anyone's
interested in my current hacked-up scanmails script, let me know.
Chris