deny on more aveserver return codes

Mike Sturdee <[email protected]> Thu, 3 Mar 2005 09:15:25 -0500 (EST)
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
Currently it looks like exiscan only matches on the malware condition 
using aveserver when there is an invfected file. It would be nice if it 
could match on multipe return codes such as:

password-protected archives
corrupted files		(optional)
suspicious files
files with code resembling a known virus

It looks like the return codes from the aveserver socket are different 
than those from aveclient or kavscanner, so the only return code number I 
have is: "232 File is suspicious" which is from a virus getting through 
that is not in the virus definitions yet.

-Mike