Re: Re: Multiple malware scanners

Good idea!

Tom Kistner <[email protected]> schrieb am 18.08.2004 09:55:00:

> Peter Bowyer wrote:

> > Tom, are you there?

> Yes. I can make the following proposal:

> The main av_scanner variable (where you define the global scanner to
> use) will be expanded before being used. Then you can set:

> av_scanner = $acl_m0

> And in the ACL:

> deny message = Sophos detected virus ($malware_name)
> set acl_m0 = sophie
> malware = *
> 
> deny message = ClamAV detected virus ($malware_name)
> set acl_m0 = clamd
> malware = *
> 
> Also, caching will only work if the scanner string has not changed after
> expansion.

> So I don't have to make changes to the syntax and the coding overhead is
> relatively low.

> /tom


----------------------------------------------------------------------
Wolfgang Fuertbauer (E-Mail: [email protected])
EBEWE Pharma                          Tel: ++43 7665 8123 315
Mondseestrasse 11                     Fax: ++43 7665 8123 11
4866  Unterach, Austria
http://www.ebewe.com