[Mimedefang] If I have file::scan & clamAV installed, are they both used?
Lucas Albers
admin at cs.montana.edu
Wed Dec 24 14:51:01 EST 2003
Read mimedefang-filter and think about how ti works adn you will
understand where to put it.
Here is some sample code to use both:
put in:
sub message_contains_virus ()
if ($Features{'Virus:FileScan'}) {
($code, $cat, $act) = message_contains_virus_filescan();
#action_change_header("X-Virus-Scanned by FileScan");
if ($act ne "ok"){
md_syslog('warning', "Running Virus Scanner Filescan Detected
$code ");
}
return (wantarray ? ($code, $cat, $act) : $code) if $act ne "ok";
}
if ($Features{'Virus:CLAMAV'}) {
($code, $cat, $act) = message_contains_virus_clamav();
#action_change_header("X-Virus-Scanned by CLAMAV");
if ($act ne "ok"){
md_syslog('warning', "Running Virus Scanner CLAMAV Detected $code");
}
return (wantarray ? ($code, $cat, $act) : $code) if $act ne "ok";
}
return (wantarray ? (0, 'ok', 'ok') : 0);
}
Sample file::scan update script:
put in /etc/cron.daily (on linux)
perl -e 'use CPAN; install File::Scan;' 2>1 1>/dev/null
File scan is the default, and the default is to only use on virus scanner.
--Luke
Rich Stanton said:
> I installed both file::scan & clamAV (more because I didn't know what I
> was
> doing than through an active decision). I ran the eicar test file through
> my mail & it was picked up fine by file::scan. However I don't know much
> about file::scan - I've not set anything up for file::scan to update its
> signatures regularly or anything. I have set up ClamAV to update every
> day,
> and so would feel more protected if Clam was used. Will they both be
> used,
> or is only the first one (file::scan) used?
--
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana
More information about the MIMEDefang
mailing list