Stephen Gran <[EMAIL PROTECTED]> writes: > We could return OverNesteded.MIME as the virus name, I suppose, but I > have had plenty of complaints over the years about the various block max > settings, so I'm not sure this is always the right thing to do either. > We could change clamscan's exit code, but that of course doesn't do > anything for the people who don't use clamscan - exiscan uses a direct > socket to clamd, dansguardian uses a public library API, etc.
Changing the return code is definitely a thing you should do if a file cannot be scanned properly. In addition, clamd should not report "OK", but something like "ERROR". This gives more information to the service that calls ClamAV, which can then decide to do with the mail. Hendrik -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
