Re: Multiple malware scanners

Tom Kistner <[email protected]> Wed, 18 Aug 2004 09:55:00 +0200
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
Peter Bowyer wrote:

> Tom, are you there?

Yes. I can make the following proposal:

The main av_scanner variable (where you define the global scanner to 
use) will be expanded before being used. Then you can set:

av_scanner = $acl_m0

And in the ACL:

deny message = Sophos detected virus ($malware_name)
      set acl_m0 = sophie
      malware = *

deny message = ClamAV detected virus ($malware_name)
      set acl_m0 = clamd
      malware = *

Also, caching will only work if the scanner string has not changed after 
expansion.

So I don't have to make changes to the syntax and the coding overhead is 
relatively low.

/tom