[Mimedefang] Multiple Virus Scanners

[Jan Pieter Cornet]

On Fri, Sep 09, 2005 at 01:49:14AM -0700, John Rudd wrote:
> If I have both sophos and clamav installed, how can I be sure that both 
> are being used?  I see logs for clamd in syslog, but that's not how 
> sophos sweep works ... so, what do I need to do to make sure that 
> sophos is being invoked?

It will be invoked by the default MIMEDefang, provided mimedefang
knows about either sweep, sophie or SAVI. Look at mimedefang.pl -features.

Hm, SAVI requires either a patch or externally supplied routines for
{entity,message}_contains_virus_saviperl. Sophie, last I looked at it,
was badly maintained or not at all, so I would not recommend that.

If you want to be really sure, you can always write your own
message_contains_virus replacement, and then explicitly call the
individual message_contains_virus_{clamd,savi} routines yourself.

That has the added benefit that you can choose to ignore a tempfail
for one scanner if the other scanner was still successful.

-- 
#!perl -wpl # mmfppfmpmmpp mmpffm <pmmppfmfpppppfmmmf at fpffmm4mmmpmfpmf.ppppmf>
$p=3-2*/[^\W\dmpf_]/i;s.[a-z]{$p}.vec($f=join('',$p-1?chr(sub{$_[0]*9+$_[1]*3+
$_[2]}->(map{/p|f/i+/f/i}split//,$&)+97):qw(m p f)[map{((ord$&)%32-1)/$_%3}(9,
3,1)]),5,1)='`'lt$&;$f.eig;                                # Jan-Pieter Cornet