ac_scanner = $acl_m0
[email protected] Wed, 5 Jan 2005 14:05:45 +0100
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <OF4C120426.E3780149-ONC1256F80.00479262-C1256F80.0047F034@ebewe.com> |
Hi all,
I want to use 2 virusscanner and have the following setup:
av_scanner = $acl_m0
acl_check_content:
deny message = This message contains malware ($malware_name) found by
UVSCAN
set acl_m0 = cmdline:/usr/local/bin/uvscan --secure -rv
--summary --noboot --allole --analyse --mime --program --unzip
%s:Found:(Found.*)
malware = *
deny message = This message contains malware ($malware_name) found by
ANTIVIR
set acl_m0 = cmdline:/usr/bin/antivir -v -z -allfiles -noboot -s
-tmp %s:ALERT:\[(.+)\]
malware = *
and in the log I see the following messages:
>2005-01-05 14:19:43 1CmB4f-00024Y-Kw U=fuertw
F=<[email protected]> rejected after DATA: This message
contains malware (Found: EICAR test file NOT a virus.) found by >UVSCAN
>2005-01-05 14:19:43 1CmB4f-00024Y-Kw U=fuertw
F=<[email protected]> rejected after DATA: This message
contains malware (Found: EICAR test file NOT a virus.) found by >UVSCAN
twice ... found by UVSCAN ?!?!?
scanned two time with same av_scanner ?
error in printing message ?
who can help please
Wolfgang
Exim version 4.43 #1 built 05-Jan-2005 14:00:39
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 4.1.25: (October 2, 2003)
Support for: iconv() IPv6 OpenSSL
Lookups: lsearch wildlsearch nwildlsearch iplsearch dbm dbmnz dsearch
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir autoreply lmtp pipe smtp
Contains exiscan-acl patch revision 28 (c) Tom Kistner
[http://duncanthrax.net/exiscan/]
Configuration file is /etc/exim/exim.conf
----------------------------------------------------------------------
Wolfgang Fuertbauer (E-Mail: [email protected])
EBEWE Pharma
Mondseestrasse 11
4866 Unterach, Austria
Tel: ++43 7665 8123 315
Fax: ++43 7665 8123 11
http://www.ebewe.com