I'm using my own script, currently running from  "filters.post-data.tab" 
(this may change).

It'll catch many attachments without the changes to the message, just 
not all of them.

--John


Kevin Williams wrote:

>Are you using my Python filter or writing your own? I tested with file 
>attachments, and it caught them quite well, but that was all I had to 
>test with. Improvements are welcome.
>
>John Kielkopf wrote:
>  
>
>>Anyone else scanning mail with ClamAV?
>>
>>With just telling ClamAV to scan the "message file" supplied by Xmail, 
>>It'll miss a number of the test from http://www.webmail.us/testvirus
>>
>>If I build a new temp file to scan doing the following:
>> - Strip "<<MAIL-DATA>>
>>    
>>
>X-ClamAV-Scan: clean
>  
>
>>X-ClamAV-Scan: clean
>>Received-SPF: unknown  ([69.30.125.51]: domain of [EMAIL PROTECTED] uses 
>>unknown mechanism: no SPF record)" and everything before
>> - Add a "Return-Path: <xxx>" header to the top.
>> - Detect and fix a bad EOH (no double "CRLF" before the start of the 
>>message body)
>>
>>I can then get ClamAV to pass all of the tests that contain a virus. 
>>(#24 and #24 get past, but they contain no virus).
>>
>>Is it possible to get ClamAV to hit the target without all of this?  I'd 
>>like to avoid the overhead of building a new file every time I want to 
>>scan it.
>>
>>Thanks,
>>--John
>>
>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in
>>the body of a message to [EMAIL PROTECTED]
>>For general help: send the line "help" in the body of a message to
>>[EMAIL PROTECTED]
>>
>>    
>>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
>  
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to