Hi,
Use something like this:
deny message = Wegen einem Virus / Wurm abgelehnt. / Rejected due to a virus or worm.
demime = *
malware = *
What did you set for your av_scanner?
Oliver
-----Ursprüngliche Nachricht-----
Von: exim-users-admin@??? [
mailto:exim-users-admin@exim.org] Im Auftrag von Oliver Egginger
Gesendet: Freitag, 19. Dezember 2003 11:06
An: exim-users@???
Betreff: [Exim] Exim-ACL-Patch: actions on internal virusscanner error
Hello,
we use Exim 4.24 + Exim-ACL-Patch with NetBSD (1.6.1). Sometimes (maybe every third day) our virus scanner can't finish a scan as a result of a internal sortware error. It is rarely possible (maybe one of 10.000 messages is affected). The patch code rejects than the corresponding message with a temporary failure. Also the sending host sends this message again, and the virus scanner fails again, and so forth ... Is it possible to accept messages (instead of rejecting them), if the vscanner fails with an internal error code?
Current we use the following deny rule for virus checking:
deny message = This message contains malware ($malware_name)
malware = *
- oliver
Example from the logs:
2003-12-19 08:45:34 1AXFKI-0006oX-4j malware acl condition: mksd scanner
failed: ERR 128 SQ/var/spool/mail/scan/1AXFKI-0006oX-4j/1AXFKI-0006oX-4j-00003.com
2003-12-19 08:45:34 1AXFKI-0006oX-4j H=fronto.fh-friedberg.de [212.201.24.53] F=<> temporarily rejected after DATA
--
## List details at
http://www.exim.org/mailman/listinfo/exim-users Exim details at
http://www.exim.org/ ##
