[Exim] Re: [exiscanusers] Exiscan and uvscan from NAI.

Danny,

Swap the + for a *
exiscan_av_scanner_regexp_description = Found (.+)$

Regards
Gavin

> Hello... I was wondering if anyone used uvscan?
> I am not able to get the virus name properly.
>
> My configure settings are:
>
> ##Antivirus facility (AV) options:
> exiscan_av_condition = 1
> exiscan_av_action = redirect messages@??? <mailto:messages@dannysplace.net>
> exiscan_av_scanner = cmdline
> exiscan_av_scanner_path = /usr/local/bin/uvscan
> exiscan_av_scanner_options = --secure -rv --summary --noboot |
> exiscan_av_scanner_regexp_trigger = ound
> #exiscan_av_scanner_regexp_description = Found[: ] (.+)$
> exiscan_av_scanner_regexp_description = Found (.+)$
> #exiscan_av_sophie_socket
> #exiscan_av_kavdaemon_socket
> #exiscan_av_openav_host
> #exiscan_av_openav_port
> #exiscan_av_clamav_host
> #exiscan_av_clamav_port
> #exiscan_av_buffer_init_chunk = 16384
> #exiscan_av_buffer_max_chunks = 5
>
>
> Messages with an eicar attachment have the following headers:
>
> X-Infected: exiscan_spool()
> X-Scanner: exiscan for exim4 (<http://duncanthrax.net/exiscan/)> *18bhXt-0002GF-00*yw49ZK5sO9.*
>
> I've not been able to test with other virii since I do not have any...
>
> -D
> -----------------------------------------------------------------
> ATTENTION:
> The information in this electronic mail message is private and
> confidential, and only intended for the addressee. Should you
> receive this message by mistake, you are hereby notified that
> any disclosure, reproduction, distribution or use of this
> message is strictly prohibited. Please inform the sender by
> reply transmission and delete the message without copying or
> opening it.
>
> Messages and attachments are scanned for all viruses known.
> If this message contains password-protected attachments, the
> files have NOT been scanned for viruses by the ING mail domain.
> Always scan attachments before opening them.
> -----------------------------------------------------------------
>
>
>


--
Gavin Jones
Net-Work Internet Ltd
T 01824 708780
F 01824 708781
ICQ 13064515