Re: How to integrate a new (ICAP) AV scanner into amavis?
julio covolato <[email protected]>
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <[email protected]> |
Em 19/06/2020 13:59, Stefan Bauer escreveu:
> I would start by just having a basic script in place that
> prints/outputs/logs the command line parameters. (print/echo $1...).
> then you see what is passed to the script.
>
> Stefan
And use EICAR test file to change the line :
# qr/^Infected: (.+)/m,
----------------------------------
_ Engº Julio Cesar Covolato
0v0 <[email protected]>
/(_)\ F: 55-11-99175-9260
^ ^ PSI INTERNET
----------------------------------
>
> Am Freitag, 19. Juni 2020 schrieb <[email protected]
> <mailto:[email protected]>>:
>
> Hi,
>
> could someone please explaint to me or point me to the
> documentation of the syntax in the amavis 15-av_scanners?
>
> What I´m trying is to make use of the c-icap-client. So I would
> like to pass the email via the ICAP Client to an external ICAP
> Server for scanning.
>
> My ICAP Example
>
> # ['MY AV ICAP Server',
> # '/usr/bin/c-icap-client','-s response -i 192.168.17.215 -f {}',
> # [0], [2],
> # qr/^Infected: (.+)/m,
> # ],
>
> It´s not working this way. Although when I execute the
> c-icap-client manually it works fine:
>
> c-icap-client -s response -i 192.168.1.1 -f sample.pdf
>
> So what I do not understand is:
>
> Line 1: that´s just a name , OK.
>
> Line 2: includes the path to the binary and parameters I want to
> pass, but what is {} ??? Is this where the file will be passed to
> the external application?
>
> Line 3: What is [0], [2] doing? Should I change it? to what?
>
> Line 4: And what should I put into the line with "infected" Is
> this the parsing for the output of the icap result?
>
> I would also like to write my own script or binary, that will get
> emails from amavis to be scanned.
>
> But I do not know, how the syntax in 15-av_scanners should be, so
> that my script or binary will be executed in the right way.
>
> Best regards,
>
> Benjamin
>