Re: [exim] exim and clamav deny malware

On 2017-11-18 at 10:57 +0000, Jeremy Harris wrote:
> On 18/11/17 04:52, Phil Pennock wrote:
> > Or try:
> >
> > malware = */defer_ok
>
> Nope; this case sisdn't get as far as the call out to clamav. It failed
> trying to write the file for clamav to work on.

malware.c:
448 /* Ensure the eml mbox file is spooled up */
449
450 if (!(mbox_file = spool_mbox(&mbox_size, scan_filename, &eml_filename)))
451 return malware_errlog_defer(US"error while creating mbox spool file");

121 static inline int
122 malware_errlog_defer(const uschar * str)
123 {
124 log_write(0, LOG_MAIN|LOG_PANIC, "malware acl condition: %s", str);
125 return DEFER;
126 }

It _should_ be handled by /defer_ok and if not, then we have a bug to be
investigated.

-Phil