From KMail I want to pipe e-mails through a script that uses antivir to scan the e-mail (now a tem file in disk) for virusses. If a virus is found I'ld like to include the result of the scan in the mail, either as a text in the mail body or as a "virusfound.txt" attachment. I had a look at some tools but I didn't find what I was looking for. Any suggestions anyone?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday 27 September 2003 14:32, Bart Symons wrote:
From KMail I want to pipe e-mails through a script that uses antivir to scan the e-mail (now a tem file in disk) for virusses. If a virus is found I'ld like to include the result of the scan in the mail, either as a text in the mail body or as a "virusfound.txt" attachment.
I had a look at some tools but I didn't find what I was looking for.
Any suggestions anyone?
AMaViS from H+BEDV www.antivir.de - -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx - ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE/daCvKiWi8VifhEkRAivFAJ952Xqzx6tHAIq107csAMEbIsnB4wCgsIS5 pwHpxPX163u3+/ZKtK3nPOo= =fGQA -----END PGP SIGNATURE-----
I wasn't clear enough in my description. I already have te antivir part, I am using the H+BEDV software (antivir is included on the SuSE DVD. The only thing I'ld like to add is a way to insert a "virus such and such found" message in either the mail body or as a .txt file attachment to the original mail. It is this part that is still lacking. On Saturday 27 September 2003 16:37, Ian David Laws wrote:
On Saturday 27 September 2003 14:32, Bart Symons wrote:
From KMail I want to pipe e-mails through a script that uses antivir to scan the e-mail (now a tem file in disk) for virusses. If a virus is found I'ld like to include the result of the scan in the mail, either as a text in the mail body or as a "virusfound.txt" attachment.
I had a look at some tools but I didn't find what I was looking for.
Any suggestions anyone?
AMaViS from H+BEDV www.antivir.de
-- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx
---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday 27 September 2003 20:52, Bart Symons wrote:
I wasn't clear enough in my description. I already have te antivir part, I am using the H+BEDV software (antivir is included on the SuSE DVD.
Hi You mean that the antivir templates supplied are not what is required.. Ian
The only thing I'ld like to add is a way to insert a "virus such and such
<snip>
- -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx - ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE/deSpKiWi8VifhEkRAoJ2AJ9Rmkf2iOJN20B027B2LmJf/ZogbACfcMGs sH6+uuSN1ucMHLcbUdqgUYc= =95lG -----END PGP SIGNATURE-----
On Saturday 27 September 2003 10:52, Bart Symons wrote:
I wasn't clear enough in my description. I already have te antivir part, I am using the H+BEDV software (antivir is included on the SuSE DVD.
The only thing I'ld like to add is a way to insert a "virus such and such found" message in either the mail body or as a .txt file attachment to the original mail. It is this part that is still lacking.
If your sendmail/qmail is already running thru amavis you will never see these viruses in Kmail (unless kmail is popping some other site other than your own machind) because the virused mail will already be detected and sequestered by amavis. If you want to pop other sites and scan them it would be better to use fetchmail and pass them all thru sendmail/qmail for virus and spam scanning rather than waiting to do it after they hit your kmail. If you are reading your mail with Kmail, why worry about viruses anyway? They won't hurt you. -- _____________________________________ John Andersen
Hi John, I simply don't want to have things like sendmail/qmail/fetchmail/... running on my box. I have a very simple use case: kmail as my mail client for use with my ISP's mail server. I really can't be bothered with all the intricacies of x different daemons. I know these Windows virusses won't affect my Linux/KMail box but I still want to be alerted whenever someone (inadvertently) sends me a virus infected file. I use antivir to check incoming mails thanks to the "pipe" option in KMail's filters. This works fine and dumps all the infected mails in a dedicated "!VIRUS!" folder. However, I'ld like to add some additional information to the infected mails, in much the same way as spamassassin does. So this is why I'm looking for a simple tool that lets me insert text in a mail body or attach the text as a .txt file. On Sunday 28 September 2003 01:23, John Andersen wrote:
On Saturday 27 September 2003 10:52, Bart Symons wrote:
I wasn't clear enough in my description. I already have te antivir part, I am using the H+BEDV software (antivir is included on the SuSE DVD.
The only thing I'ld like to add is a way to insert a "virus such and such found" message in either the mail body or as a .txt file attachment to the original mail. It is this part that is still lacking.
If your sendmail/qmail is already running thru amavis you will never see these viruses in Kmail (unless kmail is popping some other site other than your own machind) because the virused mail will already be detected and sequestered by amavis.
If you want to pop other sites and scan them it would be better to use fetchmail and pass them all thru sendmail/qmail for virus and spam scanning rather than waiting to do it after they hit your kmail.
If you are reading your mail with Kmail, why worry about viruses anyway? They won't hurt you.
-- _____________________________________ John Andersen
On 09/29/2003 04:58 AM, Bart Symons wrote:
I simply don't want to have things like sendmail/qmail/fetchmail/... running on my box.
without an MTA, even your system cannot send you mail, which may be your problem. On my system at work, antivir DOES send you (root, and you if you are an alias, i.e. the sys admin) an email saying it found a virus, but how will it ever reach you without an MTA like sendmail or postfix running?
I have a very simple use case: kmail as my mail client for use with my ISP's mail server. I really can't be bothered with all the intricacies of x different daemons.
I know these Windows virusses won't affect my Linux/KMail box but I still want to be alerted whenever someone (inadvertently) sends me a virus infected file.
I use antivir to check incoming mails thanks to the "pipe" option in KMail's filters. This works fine and dumps all the infected mails in a dedicated "!VIRUS!" folder.
However, I'ld like to add some additional information to the infected mails, in much the same way as spamassassin does.
For example: Subject is FOUND VIRUS IN MAIL from <address> The message has been quarantined as: /var/spool/vscan/virusmails/virus-20030906-150704-14767 Here is the output of the scanner: AntiVir / Linux Version 2.0.8-8 Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. All rights reserved. Loading /usr/lib/AntiVir/antivir.vdf ... VDF version: 6.21.0.37 created 05 Sep 2003 For private, non-commercial use only. AntiVir license: <snip> checking drive/path (list): /var/spool/vscan/amavis/amavis-milter-XXciD0Kn/parts /var/spool/vscan/amavis/amavis-milter-XXciD0Kn/parts/msg-14767-2.pif Date: 6.09.2003 Time: 15:07:04 Size: 72445 ALERT: [Worm/Sobig.F virus] /var/spool/vscan/amavis/amavis-milter-XXciD0Kn/parts/msg-14767-2.pif <<< Contains signature of the worm Worm/Sobig.F -- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: http://www.mydestiny.net/~joe_morris Registered Linux user 231871 God said, I AM that I AM. I say, by the grace of God, I am what I am.
participants (4)
-
Bart Symons -
Ian David Laws -
Joe Morris (NTM) -
John Andersen