Mark Martinec skrev:
> A release candidate for amavisd-new-2.4.3 is available at:
> 
>   http://www.ijs.si/software/amavisd/amavisd-new-2.4.3-rc1.tar.gz

Why not go all the way? Kaspersky Antivirus for File servers v5.5..
I see that it has '-R' set, could be my mistake, -R turns off recursive 
scanning, so it should be '-r' instead.

Then it seems like overkill to list the CURED and CUREFAILED greps since 
we don't try to cure infections (-i0 just scan for virus presence; do 
not modify the files).

Also, the manual (pdf) gives ambigous information about suspected files, 
at some places it lists "SUSPICION" and at other places "SUSPICIOUS", so 
my suggestion is to include both in e grep. I guess it would be a good 
idea to do that on the mail server version (aveclient) as well.

The exit codes listed in the distribution .conf file seems to be a 
little off, I believe that a password protected or corrupted file 
shouldn't be listed as a virus, but be treated as "unknown" and the exit 
code shouldn't be listed at all. Isn't that the correct way? Unlisted 
exit codes makes amavis flag the mail with the 
$undecipherable_subject_tag.. Right?

Here are the exit codes from the man page:

0   no viruses found.
5   all infected objects have been cured.
10  password-protected archives have been found.
15  corrupted files have been found.
20  suspicious files have been found.
21  files with code resembling a known virus have been found.
25  infected files have been found.
30  a system error occurred during file scanning.
50  anti-virus databases could not be loaded (the path indicated in the 
configuration file does not exist).
55  anti-virus databases are damaged.
60  the date of anti-virus databases is newer than that of the license key.
64  license information is missing or no license key with the path 
indicated  in  the  configuration  file  has  been
     found.
65  configuration file could not be found.
66  configuration file could not be loaded.
70  the component is damaged.
75  the component is damaged and cannot be disinfected.


   ['Kaspersky Antivirus v5.5',
     ['/opt/kav/5.5/kav4unix/bin/kavscanner',
      '/opt/kav/5.5/kav4mailservers/bin/kavscanner','kavscanner'],
     '-i0 -xn -xp -mn -r -ePASBME {}/*', [0], [5,20,21,25],
     qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.*)/ ,
   # sub {chdir('/opt/kav/bin') or die "Can't chdir to kav: $!"},
   # sub {chdir($TEMPBASE) or die "Can't chdir back to $TEMPBASE $!"},
   ],

-- 

Anders Norrbring
Norrbring Consulting

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to