[Mimedefang] Score Clamav Results

[Dirk the Daring]

On Tue, 19 May 2009, mimedefang-request at lists.roaringpenguin.com wrote:

> ----------------------------------------------------------------------
> Message: 1
> From: "Jeff Grossman" <jeff at stikman.com>
>
> I am starting to use some third party clamav virus databases and would
> like to score the results instead of just delete the e-mail which contains
> a hit.  I am not a very good Perl programmer.  Does anybody have any
> examples of scoring those results based on the signature name?  If so,
> would you be willing to share them with me?

---- Cut Here ----
sub filter_begin
 	{
 	my($entity) = @_;

 	# ...blah blah... #

 	# Scan for viruses using ClamAV (clamd)
         my($code, $category, $action) = message_contains_virus_clamd();

 	# Look to see if virus was found
 	if ($category eq 'virus')
 		{
 			# Check to see if it is a specific virus
 			#	$VirusName is a global variable in MIMEDefang
 			#	and was populated by the call to
 			#	message_contains_virus_clamd()
                         if ($VirusName eq 'Signature-Name-Here')
 				{
 					# Do Whatever
 				}
 		}

 	# ...blah blah... #

 	}
---- Cut Here ----