Re: [cpx] CPX install feedback/issues

[Steve Yates <steve@xxxxxxxxxxx>]

On Sat, 08 Jan 2005 02:32:49 -0600
Steve Yates <steve@xxxxxxxxxxx> wrote:

>  If clamav finds a virus it
> would terminate and deliver to the server setting (/dev/null in my case) but
> I would guess a successful pass through the system's procmailrc would
> keep going.

	How about if the default clamav.rc could add a check for a
variable to skip the scan?  Then in the server's procmailrc one could
add something like:

CLAMAV_SERVER_ONLY=1

(to be set to 0 or 1 by CPX).  And in clamav.rc:

## scan
:0
* CLAMAV_SERVER_ONLY ?? 0
CLAMAV=|/usr/local/bin/clamdscan --disable-summary --stdout -

## tag
:0 fhw
* CLAMAV_SERVER_ONLY ?? 0
* CLAMAV ?? .*:\/.* FOUND
| formail -a"X-ClamAV: ${MATCH}"

## deliver
:0:
* CLAMAV_SERVER_ONLY ?? 0
* ^X-ClamAV: \/.*
* ! MATCH ?? ^^clean^^
$HOME/Mail/Quarantine

	It'd be nice too if the default delivery path could be an
environment variable, which could be toggled to "$HOME/Mail/Quarantine"
or "/dev/null".  I'm not sure of the syntax to get it to parse the $HOME
correctly still so I'll leave that up to the experts.

	Getting fancier one could think of other settings to be set at
the server level, like CLAMAV_MAX_MESSAGE_SIZE.  Then in clamav.rc:

CLAMAV_SCANMSG=1
## don't scan message bodies larger than CLAMAV_MAX_MESSAGE_SIZE
:0
* > $CLAMAV_MAX_MESSAGE_SIZE  [will this work?]
{
  CLAMAV_SCANMSG=0
  LOG="Scan skipped (message over max size limit)${NL}"
}

...and add a "* CLAMAV_SCANMSG ?? 1" condition to each section. (or the equivalent
of "if CLAMAV_SERVER_ONLY==1 then CLAMAV_SCANMSG=0" at the top?)

 - Steve Yates
 - ITS, Inc.
 - Are dog biscuits made from collie flour?

~ Taglines by Taglinator - www.srtware.com ~



======================================================================
This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
Before posting a question, please search the archives (see above URL).