Problems with sophie/exiscan

Alan Thew <[email protected]> Fri, 22 Oct 2004 13:14:10 +0100 (GMT Daylight Time)
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
I suspect that this is an issue with sophie being unable to handle MIME 
structures well enough (unless there's something missing from my 
sophie.savi file), Clam seems fine with similar mails but does anyone have 
a solution that spots viruses in multi part MIME messages when sophie just 
logs it as the following?

Oct 22 10:59:32 xxxxx sophie[18735]: WARNING          : Error: The file 
passed for scanning represented part of a multi volume archive. The file cannot 
be scanned.

I'm using a simple ACL

warn  log_message = discarding message with virus $malware_name
       demime = *
       malware = *
discard  demime = *
       malware = *

Something like this came up on the sophie list in 2002 but I don't see a 
solution posted...

Thanks

p.s. before all of you yell "use CLAM as well", this is under serious 
consideration. Is there a solution of using multiple scanners if I wish to 
use different (i.e. not the default) socket locations (exiscan uses the 
defaults as far as I can tell).

-- 
Alan Thew                                       [email protected]
Computing Services,University of Liverpool      Fax: +44 151 794-4442