Does your uvscan discover the virus if you save it as a file on your
linux box and scan that file?
I use options= --mime --recursive --secure --macro-heuristics |
Have you looked for errors in your log-files? They usually tell a lot!
But a question for you: Have you got a good version of uvscan, and where
did you buy it? Have you updated it recently? And do you manage to get
an "auto-update" going?
regards
Asbjørn
Sujit Choudhury wrote:
>I am trying to test the exiscan configuration with uvscan.
>The exim version is 4.12.
>When I send a dummy virus EICAR, using:
>exim s.choudhury@???
>........
>
><the EICAR virus string>
>it appears that it is going through and only being stopped at the
>client end.
>My configs are as follows:
>
>exiscan_condition = 1
>exiscan_crypt_salt = fo
>exiscan_unpack_mime = true
>exiscan_timeout = 2m
>exiscan_av_condition = 1
>exiscan_av_action = reject
>exiscan_av_scanner = cmdline
>exiscan_av_scanner_path = /usr/local/uvscan/uvscan
>exiscan_av_scanner_options = -secure -rv --clean --delete --noboot |
>exiscan_av_scanner_regexp_trigger = found
>exiscan_av_scanner_regexp_description = 'Found[: ] (.+)$'
>exiscan_av_buffer_max_chunks = 2
>
>
>
