[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qmail-scanner-general
Subject:    [Qmail-scanner-general]F-Secure
From:       "Greg Kelley" <gkelley () britannicaviation ! com>
Date:       2003-10-30 12:16:33
[Download RAW message or body]

My guess is the exit code for F-Secure is not being picked up properly.
Check sub-fsecure.pl and replace it with this code: (note the &debug and $DD
lines are wrapped)

sub fsecure_scanner {
  #Fsecure scanner
  &debug("fsecure: starting scan of directory \"$scandir/$file_id\"...");
  my ($fsecure_verbose)="--list" if ($DEBUG);
  my ($start_fsecure_time)=[gettimeofday];
  my ($DD,$fsecure_status,$stop_fsecure_time,$fsecure_time);
  &debug("run $fsecure_binary
 $fsecure_verbose --archive --auto --dumb --mime $scandir/$file_id 2>&1");
  $DD=`$fsecure_binary  $fsecure_verbose --archive --auto --dumb --mime
$scandir/$file_id  2>&1`;
  $fsecure_status=($? >> 8);
  &debug("--output of fsecure was:\n$DD--");
  if ( $fsecure_status > 0 ) {
    if ($fsecure_status =~ /^(3|8)$/) {
      #This covers the potential viruses
      #$quarantine_description="Suspicious Files Found";
      #if ($DD =~ /Infected:(.*)\n/) {
        $quarantine_description=$1;
      #}
      &debug("There be a virus! ($quarantine_description)");
      ($quarantine_event=$quarantine_description)=~s/\s/_/g;
      $quarantine_event="FSEC:".substr($quarantine_event,0,$QE_LEN);
      $description .= "\n---fsecure results ---\n$DD";
    } else {
      #This implies a corrupt set of DAT files or resource problems...
      &tempfail("corrupt or unknown Fsecure scanner error or
memory/resource/perms problem - exit status $fsecure_status");
    }
  }
  $stop_fsecure_time=[gettimeofday];
  $fsecure_time = tv_interval ($start_fsecure_time, $stop_fsecure_time);
  &debug("fsecure: finished scan of dir \"$scandir/$file_id\" in
$fsecure_time secs");
}


Exit status could be 3 or 8 as of 4.51 so this looks for both instead of
just exit code 8 and the word 'Infected'. Good Luck.

Rgds,

__________________________
Greg Kelley, Technology Director
Britannic Aviation, US and UK
US Office:
Pease Int'l Tradeport
68 New Hampshire Ave.
Portsmouth, NH  03801
603.766.3005
http://www.britannicaviation.com
AOPA, EAA, SSA
CFII SEL, MEL; Comm Glider



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
[prev in list] [next in list] [prev in thread] [next in thread]