[Exim] Re: av_scanner with f-prot

Top Page
Delete this message
Reply to this message
Author: Sven Geggus
Date:  
To: exim-users
Subject: [Exim] Re: av_scanner with f-prot
Mark M <mark@???> wrote:

> Has anyone ever gotten exiscan (av_scanner) to work with f-prot?


This is what I use:

# virus-scanner command using the Return value as key
av_scanner = cmdline:/usr/local/bin/f-prot -archive -packed %s ; \
echo -e "\nfprot_retval $?":fprot_retval 3:Infection:: (.*)

And an ACL like this:

# Reject viruses, allow them for addresses in /etc/exim4/virus-whitelist
deny message = This message for $acl_m0 contains malware ($malware_name)
     condition = ${lookup{$acl_m0} lsearch*@{/etc/exim4/virus-whitelist}{0}{1}}
     demime = *
     malware = *


Just use this:

deny message = This message for $acl_m0 contains malware ($malware_name)
     demime = *
     malware = *


If you do not have any addresses where viruses should be passed.

Sven

--
"If you continue running Windows, your system may become unstable."
(Windows 95 BSOD)

/me is giggls@ircnet, http://sven.gegg.us/ on the Web