[Mimedefang] Viruses getting passed clamd but can be detected with clamscan manually???

[Dirk Mueller]

On Thursday 04 March 2004 07:03, David Erickson wrote:

> Anyone else seeing something like this?

Sure, its a bug in message_contains_virus_clamd(). Add this chunk of code 
before "open up a socket and scan each file in ./Work" (in mimedefang.pl) :

    # copy message for clamd
    open(I, "<INPUTMSG");
    open(O, ">Work/COMPLETE_MSG");
    # give ClamAV the hint to treat it as mbox, otherwise
    # it doesn't detect all the inline files.
    print O "From foo\@bar.com 1 Jan 2004\r\n";
    while(<I>) {
      print O;
    }
    close(I);close(O);


Dirk