Re: [Exim] Re: Comments re: exiscan-4.10-15

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Tom Kistner
Dátum: 2002-09-09 14:27 -000
Címzett: Larry Rosenman
CC: exim-users
Tárgy: Re: [Exim] Re: Comments re: exiscan-4.10-15
Larry Rosenman wrote:

>    Any suggestions on my questions about McAfee's UVSCAN (3 different
> possible lines of output)?


Sorry, my Inbox is a blackhole sometimes :)

This was what amavisd-milter was doing:

$loutput =~ s/Found: (.+) NOT a/Found the $1/g;
$loutput =~ s/Found the (.+) trojan/Found the $1 virus/g;
$loutput =~ s/Found virus or variant (.+) /Found the $1 virus/g;
@virusname = ($loutput =~ /Found the (.+) virus/g);
@virusname = (undef) if !@virusname; # just in case: make list

With exiscan, just use this:

exiscan_av_scanner_regexp_trigger = Found
exiscan_av_scanner_regexp_description = Found[: ] (.+)$

That will even put McAffees metainformation in the virus name :)

/tom

--
Tom Kistner <tom@???>
ICQ 1501527 dcanthrax@efnet
http://duncanthrax.net