Re: [exim-dev] New malware scanner type "sock"

Top Page
Delete this message
Reply to this message
Author: Dr Andrew C Aitchison
Date:  
To: Jeremy Harris
CC: exim-dev
Subject: Re: [exim-dev] New malware scanner type "sock"
On Sat, 8 Mar 2014, Jeremy Harris wrote:

> On 02/03/14 13:42, Jeremy Harris wrote:
>> On 18/02/14 22:29, Jeremy Harris wrote:
>>> On 16/02/14 22:08, Jeremy Harris wrote:
>>>> I'd like
>>>> reviewers and testers.
>>>
>>
>> Version 4 attached. This has been running in production for a couple
>> of days, demonstrating operation of:
>>
>> clamav/SCAN
>> sock
>>
>> I'd still like confirmation from other people that I've not broken:
>>
>> f-protd
>> drweb
>> aveserver
>> fsecure
>> kavdaemon
>> cmdline
>> sophie
>> clamd/STREAM
>> clamd/zINSTREAM
>> mksd
>
> I've heard zilch. Does anyone care if I commit the potentially broken
> code?


Sorry, I'm off sick and don't officially have access to the
work systems which use clamd/clamav from exim.
The config file has:
   av_scanner = $acl_m0
     ...
   warn message = ClamAV found $malware_name
         set acl_m0 = clamd:/var/run/clamav/clamd.sock
          malware = *
     ...


but I'm not sure whether that means I'm using clamav/SCAN, sock,
clamd/STREAM or clamd/zINSTREAM.
Full config at https://www.dpmms.cam.ac.uk/~werdna/config

I've had package problems with clamav recently and
dont currently have a working version on a machine I can test with,
so wont have a test result for a while.

-- 
Dr. Andrew C. Aitchison        Computer Officer, DPMMS, Cambridge
A.C.Aitchison@???    http://www.dpmms.cam.ac.uk/~werdna