[Mimedefang] virus scanner detection for node32

[Stephane Lentz]

On Wed, Nov 27, 2002 at 02:24:02PM +0100, Bartosz Aninowski wrote:
> 
> > 
> > I use node32 http://www.nod32.com/home/home.htm
> > virus scanner
> > how to add this to MIMEDefang's scanners 
> > can't find on archives
> > 
> > Bart
> 

Find out :
- Nod32 switches to use
- Nod32 exit-codes for clean/infected/suspicious messages
- Nod32 output for each kind of message 

For getting this info you can look at amavis* code : 

* amavisd-snapshot code : 
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/amavis/amavis/amavis/av/
review the file nod32

* amavisd-new code : 
['ESET Software NOD32', 'nod32',
    '-all -subdir+ {}', [0], [1,2],
    qr/(?m)^.+? - (.+?)\s*(?:backdoor|joke|trojan|virus|worm)/ ],

  ['ESET Software NOD32 - Client/Server Version', 'nod32cli',
    '-a -r -d recurse --heur standard {}', [0], [10,11],
    qr/(?m)^\S+\s+infected:\s+(.+)/ ],

Then modify : 
- configure.in for introducing : 
AC_ARG_ENABLE(nod32,    [  --disable-nod32 ....  stuff 
- mimedefang.pl.in to define  : 
- $Features{'Virus:NOD32'}
sub entity_contains_virus_nod32 ($) {
sub message_contains_virus_nod32 () {
sub interpret_nod32_code ($) {

Have a look at the existing antivirus support code (for example : McAfee or Trend ...)

I posted some message in the past to add  Trend support:
http://lists.roaringpenguin.com/pipermail/mimedefang/2002-May/001229.html

Regards, 

SL/
---
Stephane Lentz / Alcanet International - Internet Services