last months patches

[Rick Cooper]

You should remove the references to the $haverar state in the SweepViruses
patch then. Without the UnpackRar function to handle the passworded rar
files the clamavmodule function should ignore the fact that they have unrar
and activate the clamav passworded archive checks if allow password
protected is false, regardless of the existence of unrar.

Thanks, at least that is a few I won't have to rebuild when the core files
change :-)

Rick

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Julian Field
> Sent: Sunday, July 04, 2004 12:00 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: last months patches
>
>
> I have applied all the patches except the ones listed below.
>
> ================================
> Message.patch:
> ================================
> Modifies the "is spam" logging to out put as: (one line no wrap)
>
> Jun 21 16:35:09 srv2 MailScanner[15180]: Message 1BcWRW-0004FN-6d
>   from 66.161.21.120 (news at email.americangirl.com)
>   to cooper-home.com is spam,
>   SpamAssassin (score=12.858, required 6, BAYES_99 5.40, CLICK_BELOW 0.10,
>    HTML_70_80 1.50, HTML_FONTCOLOR_RED 0.10, HTML_IMAGE_RATIO_10 1.50,
>    HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10, HTML_WEB_BUGS 0.34,
>    MIME_HTML_NO_CHARSET 0.56, MIME_HTML_ONLY 1.50, SUB_FREE_OFFER 1.66
>    Report Len is 281)
>    :rick at cooper-home.com : Free Shipping on Girls of Many Lands
> Outputs normal log line plus recipient information and subject.
> SA report len
> is shown because it's truncated to 500 characters maximum and the
> entire line is truncated to 800 characters. the to and subject
> are delimited with colons to make extraction simpler multiple recipients
> are delimited by a semi-colon ";", again for easy extraction. With
> this logging it was easy to create a php script that periodically sends
> me spam information that includes the recipient, the from address, the
> subject and the SA score and I can generally look at that and dismiss
> most of the spam,or get a hold of the recipient and ask if they want the
> message... saves me a LOT of time.
>
> Adds UnPackRar function.
> Is functionally the same as UnPackZip. If there is no unrar in the path
> returns gracefully, otherwise follows the same logic as unpacking a zip
> file including catching password protected archives and handling as
> configured, if file is password protected or there is an extract error but
> the directory listing can be read will create 0 byte files to match
> the rar contents for file name rule matching
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html