Mailscanner with AntiVir?

[Julian Field]

At 19:13 19/12/2002, you wrote:
>AntiVir 2.0.6 (current one) does produce a copyright statement.  The change
>document states that in 2.0.3 "real-time scan output is suppressed for
>non-tty's".  I don't have an older copy to compare the command line options
>to.

I have added support to the AntiVir parser to handle the new output format 
as well as the old one.
To put it mildly, their documentation stinks :-(
They have minor omissions, such as never mentioning the command-line switch 
that makes it scan archives.
I hope to get the new version out soon, but not sure which side of 
Christmas it will be. I might wait until after Christmas now, as no-one is 
going to be doing much over the next week anyway.

If you want to try out an early release and test it for me, I would 
appreciate it. Please email me off-list if you want to do that.


>-----Original Message-----
>From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
>Sent: Thursday, December 19, 2002 4:32 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Mailscanner with AntiVir?
>
>
>The original AntiVir code was contributed by Cornelius Kölbel
><nelischnuck at web.de>, not by me or Nick.
>
>Can you put a few viruses in /tmp and then do
>          cd /tmp
>          /usr/lib/AntiVir/antivir -allfiles -s -rs -z
>
>It should just produce lines containing virus reports. If it produces
>anything else (such as copyright information or a banner of some sort), can
>you look through the docs to see if they have changed the command-line
>options at all?
>
>At 19:50 18/12/2002, you wrote:
> >Hello,
> >
> >i installed Mailscanner today and have a problem to get it work with
> >AntiVir (H+BEDV, www.hbedv.com).
> >
> >After setting up Mailscanner i get the following errors in my logs:
> >
> >mailscanner[3869]: Either you've found a bug in MailScanner's AntiVir
> >output parser, or AntiVir's output format has changed! AntiVir
> >said this "AntiVir / Linux Version 2.0.6-7". Please mail the author of
> >MailScanner
> >mailscanner[3869]: Either you've found a bug in MailScanner's AntiVir
> >output parser, or AntiVir's output format has changed! AntiVir
> >said this "Copyright (C) 1994-2002 by H+BEDV Datentechnik GmbH.". Please
> >mail the author of MailScanner
> >mailscanner[3869]: Either you've found a bug in MailScanner's AntiVir
> >output parser, or AntiVir's output format has changed! AntiVir
> >said this "All rights reserved.". Please mail the author of MailScanner
> >mailscanner[3869]: Either you've found a bug in MailScanner's AntiVir
> >output parser, or AntiVir's output format has changed! AntiVir
> >said this "". Please mail the author of MailScanner
> >
> >Also, the EICAR Test Signature is not marked as virus?
> >
> >On
> >http://www.free-av.de/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic&f=19&t=00023
>7
> >ist seems that something has changed in the AntiVir output.
> >
> >Is there any fix for this?
> >
> >With best regards,
> >Juergen Schabetsberger,
> >Germany
>
>--
>Julian Field
>www.MailScanner.info
>MailScanner thanks transtec Computers for their support
>
>
>
>----------  Internet E-mail Confidentiality Disclaimer  ----------
>
>PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message.  If
>you are not the addressee indicated in this message or the employee or agent
>responsible for delivering it to the addressee, you are hereby on notice
>that you are in possession of confidential and privileged information.  Any
>dissemination, distribution, or copying of this e-mail is strictly
>prohibited.  In such case, you should destroy this message and kindly notify
>the sender by reply e-mail.  Please advise immediately if you or your
>employer do not consent to Internet email for messages of this kind.
>
>Opinions, conclusions, and other information in this message that do not
>relate to the official business of my firm shall be understood as neither
>given nor endorsed by it.

-- 
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support