[Mimedefang] If I have file::scan & clamAV installed, are they both used?

Lucas Albers admin at cs.montana.edu
Wed Dec 24 14:51:01 EST 2003


Read mimedefang-filter and think about how ti works adn you will
understand where to put it.

Here is some sample code to use both:
put in:
sub message_contains_virus ()


     if ($Features{'Virus:FileScan'}) {
        ($code, $cat, $act) = message_contains_virus_filescan();
        #action_change_header("X-Virus-Scanned by FileScan");
        if ($act ne "ok"){
        md_syslog('warning', "Running Virus Scanner Filescan Detected
$code ");
        }
        return (wantarray ?  ($code, $cat, $act) : $code) if $act ne "ok";
    }

      if ($Features{'Virus:CLAMAV'}) {
        ($code, $cat, $act) = message_contains_virus_clamav();
        #action_change_header("X-Virus-Scanned by CLAMAV");
        if ($act ne "ok"){
        md_syslog('warning', "Running Virus Scanner CLAMAV Detected $code");
        }
        return (wantarray ? ($code, $cat, $act) : $code) if $act ne "ok";
     }
     return (wantarray ? (0, 'ok', 'ok') : 0);
}

Sample file::scan update script:
put in /etc/cron.daily (on linux)

perl -e 'use CPAN; install File::Scan;' 2>1 1>/dev/null


File scan is the default, and the default is to only use on virus scanner.

--Luke
Rich Stanton said:
> I installed both file::scan & clamAV (more because I didn't know what I
> was
> doing than through an active decision).  I ran the eicar test file through
> my mail & it was picked up fine by file::scan.  However I don't know much
> about file::scan  - I've not set anything up for file::scan to update its
> signatures regularly or anything.  I have set up ClamAV to update every
> day,
> and so would feel more protected if Clam was used.  Will they both be
> used,
> or is only the first one (file::scan) used?



-- 
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana



More information about the MIMEDefang mailing list