Bruno, Steve, > I was looking for a option how to make my new f-prot working with amavis. > And I've found your thread > http://marc.info/?l=amavis-user&m=119308375204361&w=2 > > I want to give a try to the Mark code. But as I don't really understand yet > the amavis code after the call to fpscan ... > [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3], > what means the (1,2,3 .... )
amavisd.conf-sample: # @av_scanners is a list of n-tuples, where fields semantics is: ... # 5. an array ref of av scanner exit status values, or a regexp (to be # matched against scanner output), indicating VIRUSES WERE FOUND; # a value undef may be used and it never matches (for consistency with 4.); # Note: the virus match prevails over a 'not found' match, so it is safe # even if the no. 4. matches for viruses too; > I give some manual try with real virus (easily found by clamd) > here's the result : Thanks for samples. So what was still missing was an updated regexp to collect virus names from the output of a virus scanner. Try this one (with some options from the other thread, suggested by Steve): ### http://www.f-prot.com/ F-PROT Antivirus Command-Line Scanner, V6 ['F-PROT Antivirus for UNIX', ['fpscan'], '--report --adware --mount {}', # consider: --applications -s 4 -u 3 -z 10 [0,8,64], [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3], qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/ ], Mark ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
