Re: [Exim] Re: Comments re: exiscan-4.10-15

Top Page
Delete this message
Reply to this message
Author: Larry Rosenman
Date:  
To: Tom Kistner
CC: exim-users
Subject: Re: [Exim] Re: Comments re: exiscan-4.10-15
On Mon, 2002-09-09 at 09:27, Tom Kistner wrote:
> Larry Rosenman wrote:
>
> >    Any suggestions on my questions about McAfee's UVSCAN (3 different
> > possible lines of output)?

>
> Sorry, my Inbox is a blackhole sometimes :)
>
> This was what amavisd-milter was doing:
>
> $loutput =~ s/Found: (.+) NOT a/Found the $1/g;
> $loutput =~ s/Found the (.+) trojan/Found the $1 virus/g;
> $loutput =~ s/Found virus or variant (.+) /Found the $1 virus/g;
> @virusname = ($loutput =~ /Found the (.+) virus/g);
> @virusname = (undef) if !@virusname; # just in case: make list
>
> With exiscan, just use this:
>
> exiscan_av_scanner_regexp_trigger = Found
> exiscan_av_scanner_regexp_description = Found[: ] (.+)$
>
> That will even put McAffees metainformation in the virus name :)

Thanks, Tom.

Can this wind up in the Readme?


>
> /tom
>
> --
> Tom Kistner <tom@???>
> ICQ 1501527 dcanthrax@efnet
> http://duncanthrax.net

--
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: ler@???
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749