Gary Stainburn <gary.stainburn@???> (Di 17 Nov 2015 14:32:08 CET):
> I've got installed on a Centos 7 box, EXIM, Spamassassin, Clamav, Kaspersky AV
> for Maiil Server and home-grown scripts.
>
> My home grown scripts are the last to be called using the following
>
> deny set acl_m0 =
> cmdline:/etc/exim/bin/virus_sweep %s:ThreatName:'(.*?)'
> malware = *
> set acl_c_SPAM = 1
> message = This message contains a virus ($malware_name).
>
> in acl_check_data. This is after Clamav and Kaspersky but currently before
> Spamassassin.
How do you know that ClamAV and Kaspersky are done already?
How do you know that Kaspersky changes the Subject line of the message
file?
What do you find if you use the control = no_mbox_unspool and check the
spooled messages afterwards?
> Kasp adds and modifies headers in the email as it processes it, but when I see
> the message in my script, the Kasp content is not visible.
>
> One example is that it updates the status to include one or more of [SPAM]
> [MASSMAIL] [CURED].
>
> However, the subject line that my script always sees is the original one.
There are lots of files after spooling for content scan. Which files do
you inspect?
Best regards from Dresden/Germany
Viele Grüße aus Dresden
Heiko Schlittermann
--
SCHLITTERMANN.de ---------------------------- internet & unix support -
Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
gnupg encrypted messages are welcome --------------- key ID: F69376CE -
! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -
