Re: [Exim] Re: Comments re: exiscan-4.10-15

Góra strony
Delete this message
Reply to this message
Autor: Tom Kistner
Data:  
Dla: Larry Rosenman
CC: exim-users
Temat: Re: [Exim] Re: Comments re: exiscan-4.10-15
Larry Rosenman wrote:

>    Any suggestions on my questions about McAfee's UVSCAN (3 different
> possible lines of output)?


Sorry, my Inbox is a blackhole sometimes :)

This was what amavisd-milter was doing:

$loutput =~ s/Found: (.+) NOT a/Found the $1/g;
$loutput =~ s/Found the (.+) trojan/Found the $1 virus/g;
$loutput =~ s/Found virus or variant (.+) /Found the $1 virus/g;
@virusname = ($loutput =~ /Found the (.+) virus/g);
@virusname = (undef) if !@virusname; # just in case: make list

With exiscan, just use this:

exiscan_av_scanner_regexp_trigger = Found
exiscan_av_scanner_regexp_description = Found[: ] (.+)$

That will even put McAffees metainformation in the virus name :)

/tom

--
Tom Kistner <tom@???>
ICQ 1501527 dcanthrax@efnet
http://duncanthrax.net