Zip files not getting checked?

[Steve Thomas]

On Sat, Aug 02, 2003 at 05:54:48PM +0100, Julian Field is rumored to have said:
>
> Be warned that I will probably re-write the script in my own style, but
> analyse his code carefully to make sure I don't miss any tricks he is doing.

I'd hope that you'd rewrite it - I'm not a perl guru by any stretch of the imagination and I KNOW it could be cleaner/safer/faster.

There's nothing special going on in there. I wrote it a couple of years ago when I was using the amavis shell script for virus scanning. It takes the message on stdin, scans it for lines containing nothing but an authentic IDE url and pulls them down with wget or a similar tool. Once it's got the file, it checks the first line to make sure that it's an IDE (easy since they're text files) and then writes it to disk. When it's done, it send an e-mail detailing what happened.


> As people using this will be using it instead of the hourly global updater,
> it needs to be absolutely right and tolerant of all sorts of changes that
> Sophos might choose to make to the format of the email message they send
> out. The last thing you want is for Sophos to re-write their standard email
> message and everyone's updates to stop working completely. It needs to (a)
> be very tolerant of lousy input, and (b) capable of noticing it hasn't had
> an update in a few days and start screaming very loudly about it.

I don't claim that it's bulletproof, but it's worked for me so far. At our office, I've made a couple of changes to it to fit our environment. I added a section that uploads it via ftp to our two file servers which run as SAV central servers, then run "setup.exe /update /ni" on the remote servers so when the clients check in, they'll know to update. With this setup I only have to do the monthly updates on the central and mail servers.

It doesn't keep any kind of state information, so it won't complain if it's been a day/week/year since it was last run. It's pretty straightforward and simple.


> The only difficulty with it will be producing the installation instructions
> for it, as a lot of MailScanner admins don't really know enough to be able
> to use something like this without quite a bit of help.

The instructions included were written while I was using sendmail, but should work fine with exim, too (I switched over to exim and didn't have to change a thing). Installation should be pretty easy, even for most novices. It's been downloaded 400 times and counting, and I haven't had anyone email me with installation issues.


--
"Well done is better than well said."
- Benjamin Franklin (1706-1790)