On 2011-01-28 14:06, John Horne wrote:
> The current 'malware' condition returns a DEFER if there is a problem with the
> scanner at all. However, the user cannot detect this unless they use the
> condition with an 'accept' or 'deny' ACL verb. I want to use:
>
> warn malware = *
>
> and then process the result of whether malware was found or not, and whether to
> deliver it or not depending on other conditions (recipients).
acl_chk_mal:
require set acl_m_tmp = deferred
accept malware = *
set acl_m_tmp = was_mal
deny set acl_m_tmp = not_mal
acl_original:
...
warn acl = acl_chk_mal
defer condition = ${if eq {deferred}{$acl_m_tmp}}
log_message = LOGGING: ClamAV message deferred.
deny condition = ${if eq {was_mal}{$acl_m_tmp}}
log_messsage = LOGGING: looks bad to me.
--
Jeremy
