This is a discussion on Re: [AMaViS-user] amavisd-new-2.4.3-rc1 release within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Anders, > >>> Also, the manual (pdf) gives ambigous information about suspected > >>> files, at ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Anders,
> >>> Also, the manual (pdf) gives ambigous information about suspected > >>> files, at some places it lists "SUSPICION" and at other places > >>> "SUSPICIOUS", so my suggestion is to include both in e grep. > >>> I guess it would be a good idea to do that on the mail server > >>> version (aveclient) as well. Ok, will do so. > sub {chdir('/opt/kav/bin') or die "Can't chdir to kav: $!"}, > sub {chdir($TEMPBASE) or die "Can't chdir back to $TEMPBASE $!"}, Gary claimed than changing current directory to /opt/kav/bin is no longer necessary (IIRC), so I'd strike or comment out these subs. Now I have: ### http://www.kaspersky.com/ ['Kaspersky Antivirus v5.5', ['/opt/kav/5.5/kav4unix/bin/kavscanner', '/opt/kav/5.5/kav4mailservers/bin/kavscanner','kavscanner'], '-i0 -xn -xp -mn -R -ePASBME {}/*', [0,10,15], [5,20,21,25], qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.*)/ , # sub {chdir('/opt/kav/bin') or die "Can't chdir to kav: $!"}, # sub {chdir($TEMPBASE) or die "Can't chdir back to $TEMPBASE $!"}, ], ### http://www.kaspersky.com/ (kav4mailservers) ['KasperskyLab AVP - aveclient', ['/usr/local/kav/bin/aveclient','/usr/local/share/kav/bin/aveclient', '/opt/kav/5.5/kav4mailservers/bin/aveclient','aveclient'], '-p /var/run/aveserver -s {}/*', [0,3,6,8], qr/\b(INFECTED|SUSPICION|SUSPICIOUS)\b/, qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.+)/, ], # NOTE: one may prefer [0],[2,3,4,5], depending on how suspicious, # currupted or protected archives are to be handled Mark ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?p...rge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/...fo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ |