Re: [AMaViS-user] Bypassing specific AV output

Asfihani,

> Is there is any idea on how to bypass specific output from command
> line virus scanner in amavisd-new? My system currently running well
> with current configuration, but our client need to bypass a macro
> scanning. The output of the scanner is VIRUS: W97M/Generic. I already
> read uvscan manual but unfortunately did not find any option for
> bypassing macro scan.

It might be possible to modify the uvscan AV entry in amavisd.conf
and replace the check for status, i.e. the [13], with a regexp to
parse the uvscan output, which may give you more flexibility.

The amavisd.conf-sample says:
....
# 4. an array ref of av scanner exit status values, or a regexp (to be
# matched against scanner output), indicating NO VIRUSES found;
# a special case is a value undef, which does not claim file to be clean
# (i.e. it never matches, similar to []), but suppresses a failure warning;
# to be used when the result is inconclusive (useful for specialized and
# quick partial scanners such as jpeg checker);
# 5. an array ref of av scanner exit status values, or a regexp (to be
# matched against scanner output), indicating VIRUSES WERE FOUND;
# Note: the virus match prevails over a 'not found' match, so it is safe
# even if the no. 4. matches for viruses too;


Mark


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/