[clamassassin-discuss] ClamAssassin on eXtremail

[James Lick]

Matt Babcock wrote:

>I am new to this list so forgive me if I missed something before this point. I searched the archive (not very big) and didn't see anything that would relate. According to your product description this can be used with just about any mail server that can process external applications as a mail filter. In my case here I am using the eXtremail server (http://www.extermail.com). This server has mail filters for both incomming and outgoing mail. The documentation to add a new mail filter says that I need to specify an "external program that is going to receive the content of the mail". This said, my question is what command line parameters do I need to pass to get ClamAssassin to accept my message? I currently have it just running the binary, but that doesn't work. I have tested it using the Eicar.com virus check file. I know the file is infected because my client side antivirus picks it up if not disabled before sending it. Do you have any suggestions?
>  
>

Hi Matt,

    clamassassin may not do what you want.  clamassassin only adds 
headers to the message indicating whether it is infected or not.  You 
will have to have some other program look at these headers and then 
decide to throw out or redirect infected messages.  clamassassin is 
usually used in the procmail mail sorting program.  Your mail server 
probably works by looking at the exit code of the external program 
called to determine whether to reject the message which is a bit 
different.  In that case you could just call clamscan/clamdscan 
directly, as it will return an false exit code if the message is 
infected.  Since I don't know anything about your particular mail 
server, I can't give any further advice.

-- 
James Lick -- 黎建溥 -- jlick at jameslick.com -- http://jameslick.com/