deny on more aveserver return codes
Mike Sturdee <[email protected]> Thu, 3 Mar 2005 09:15:25 -0500 (EST)
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
Currently it looks like exiscan only matches on the malware condition using aveserver when there is an invfected file. It would be nice if it could match on multipe return codes such as: password-protected archives corrupted files (optional) suspicious files files with code resembling a known virus It looks like the return codes from the aveserver socket are different than those from aveclient or kavscanner, so the only return code number I have is: "232 File is suspicious" which is from a virus getting through that is not in the virus definitions yet. -Mike