Brett I. Holcomb wrote:
However,
clamscan in procmail doesn't find them.
I use Clamassassin, a script to feed mail to clamav:
<http://drivel.com/clamassassin/>
Then do this in procmail:
# filter mail through clamav using clamassassin script
:0fw
| /usr/local/bin/clamassassin
And delete the found virus plus log the fact, though you'll probably
have you're own version of this:
:0
* ^X-Virus-Status: Yes
{
# Extract some headers into variables for logging
:0
* ^Subject:\/.*
{ SUB = $MATCH }
:0
* ^From:\/.*
{ FRO = $MATCH }
:0
* ^X-Virus-Report:\/.*
{ VIR = $MATCH }
LOG="${NL}$DATE $LOGUSER $VIR $FRO $SUB"
HOST = kill.virii.dead
}
HTH
Adrian
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail