Kaspersky 5.5

[Chris Russell]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

 Also for anyone else installing:
 
 The wrapper script is currently the same for Kaspersky and Kaspersky-4.5, so make sure you set the correct path into /usr/lib/MailScanner/kaspersky-autoupdate.
 
Cheers,
 
Chris
 
 
 

________________________________

From: MailScanner mailing list on behalf of Chris Russell
Sent: Thu 15/09/2005 17:31
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Kaspersky 5.5



Hi Julian,

 When using MailScanner with Kaspersky 5.5, Virus Scanner =
kaspersky-4.5 will not work with Kaspersky 5.5

 To resolve this, a change is required in the kaspersky-wrapper. Under
the section:

# For KAV 4.5.0

Change:

  ${PackageDir}/$Scanner $ScanOptions -o$Report -j3 -q "$@"

To

  ${PackageDir}/$Scanner $ScanOptions -o$Report -j5 -q "$@"


 Without this, Kaspersky will only print a summary line ie: "Clean 0
Archive 2 Infected 2" (which isn't flagged as we look for INFECTED),
using -j5 adds the standard file - INFECTED - virus line to the report.

 Another thing is the full path is displayed on the notification, ie:

 Report: Kaspersky:
/var/spool/MailScanner/incoming/23579/1EFwUx-00068Y-EC/eicar.com
INFECTED        EICAR-Test-File

 I`ll look into that tomorrow, but methinks we need a new flag for v5.5
:)

Cheers,

Chris

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner is part of the Mail Filtering service from Nexent Internet.





------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!