Re: ac_scanner = $acl_m0

"madhon" <[email protected]> Wed, 5 Jan 2005 13:38:43 -0000
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <002601c4f32b$dfd52e50$0b00a8c0@matrix>
----- Original Message ----- 
From: <[email protected]>
To: <[email protected]>
Sent: Wednesday, January 05, 2005 1:05 PM
Subject: [exiscanusers] ac_scanner = $acl_m0
> I want to use 2 virusscanner and have the following setup:
>
> av_scanner = $acl_m0
>
> acl_check_content:
>   deny  message = This message contains malware ($malware_name) found by
>   UVSCAN
>           set acl_m0 = cmdline:/usr/local/bin/uvscan --secure -rv
>   --summary --noboot --allole --analyse --mime --program --unzip
>   %s:Found:(Found.*)
>           malware = *
>     deny  message = This message contains malware ($malware_name) found by
>   ANTIVIR
>           set acl_m0 = cmdline:/usr/bin/antivir -v -z -allfiles -noboot -s
>   -tmp %s:ALERT:\[(.+)\]
>           malware = *
>

in my config i have

av_scanner = $acl_m0

and

acl_check_content:
  deny  message = Virus/Trojan detected in email ($malware_name)
        set acl_m0 = clamd:/var/run/clamd.sock
        demime = *
        malware = */defer_ok

  deny  message = Virus/Trojan detected in email ($malware_name)
        set acl_m0 = sophie:/var/run/sophie
        demime = *
        malware = *

this works fine for me