Hi! I can't say for your scanner, but the section in amavis.conf for virus scanning is quite well documented, so it's not very hard to set up. Just read the info text in the amavis.conf closely and use the existing examples as templates for your scanner (if it's not already in there). Also, make use of the FAQ's and HOW-TO's on the Amavis home site and wherever you can find them. Anders.
Subject: RE: [SLE] Customize AV scanner response actions
Dear all,
If I run Amavisd-new (installed from Suse 9.0 pro) with antivir command line scanner, how to configure amavisd-new to handles emails that contain viruses, and automatically scan, repair or delete email attachment with viruses.
I already installed with avmailgate, but it seems failed or not configured well. Virus from outside is still came in and sent to others in my LAN.
Best regards, Hangga
-----Original Message----- From: Anders Norrbring [mailto:anders@norrbring.biz] Sent: Tuesday, April 20, 2004 7:16 PM To: Amavis users; SuSE Help mail list Subject: [SLE] Customize AV scanner response actions
Hiya!
I run Amavis-new with 2 AV scanners, NOD32 and Kaspersky 5.0, this works just great... But I see a need to somehow customize how Amavis handles the scanner's responses.
This is primarily related to Kaspersky which can send responses that I see should be handled differently than just "Virus found" or "Clean", something in between...
Kaspersky sends a warning response when it can't scan a file, for example a password protected or encrypted file, like the psw protected zip files that contains viruses. But, the problem is that some of my clients do send "legitimate" files encrypted or password protected.
On these files Kaspersky sends messages like "Password-protected archives were detected" and "Suspicious files were detected."
Of course with exit numeric exit codes. So, what I want to do with these e-mails, is to distribute them to the recipient, perhaps as an attach, and modify the e-mail header to contain something like "***WARNING*** or similar, and maybe an explanatory body text and the original e-mail attached.
Is this possible with today's version (I have amavisd-new-20030616-p5) or is it planned for a future version? Can today's version be easily modified?
Regards, Anders Norrbring Norrbring Consulting
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com