[Exim] Exiscan and uvscan from NAI.

Top Page
Delete this message
Reply to this message
Author: Danny.Carroll
Date:  
To: exim-users, exiscanusers
Subject: [Exim] Exiscan and uvscan from NAI.
Hello... I was wondering if anyone used uvscan?
I am not able to get the virus name properly.

My configure settings are:

##Antivirus facility (AV) options:
exiscan_av_condition = 1
exiscan_av_action = redirect messages@??? <mailto:messages@dannysplace.net>
exiscan_av_scanner = cmdline
exiscan_av_scanner_path = /usr/local/bin/uvscan
exiscan_av_scanner_options = --secure -rv --summary --noboot |
exiscan_av_scanner_regexp_trigger = ound
#exiscan_av_scanner_regexp_description = Found[: ] (.+)$
exiscan_av_scanner_regexp_description = Found (.+)$
#exiscan_av_sophie_socket
#exiscan_av_kavdaemon_socket
#exiscan_av_openav_host
#exiscan_av_openav_port
#exiscan_av_clamav_host
#exiscan_av_clamav_port
#exiscan_av_buffer_init_chunk = 16384
#exiscan_av_buffer_max_chunks = 5


Messages with an eicar attachment have the following headers:

X-Infected: exiscan_spool()
X-Scanner: exiscan for exim4 (<http://duncanthrax.net/exiscan/)> *18bhXt-0002GF-00*yw49ZK5sO9.*

I've not been able to test with other virii since I do not have any...

-D
-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------