Clamav suggestions

[--[ UxBoD ]--]

Why not just scan the whole file after all the individual scans, but only if it hasn't detected anything in the individual element ones ?

On Thu, 10 May 2007 09:43:16 +0200, Fabio Pedretti <pedretti at eco.unibs.it> wrote:
> Citando "Koopmann, Jan-Peter" <jan-peter at koopmann.eu>:
> 
>> On Wednesday, May 09, 2007 9:27 PM Julian Field wrote:
>>
>>> I can't see any effective good solution to this one.
>>
>> Except for convincing the clamav developers to put in another scan
>> option. When called with this option they would not check for the
>> existance of mail headers. I have no idea how delighted they would
>> be if we proposed this though. Any volunteers? :-)
> 
> I don't know if this is a good solution. Clamav check for this strings
> only in mails, as check for macro viruses only in MS files, for unix
> viruses only on ELF files, etc...
> I think the problem is in how MailScanner call clamav, giving it all
> separated attachments and not the full mail.
> 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!
> 
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
-- 
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +44 (0) 845 869 2749  SIP: uxbod at sip.splatnix.net


-- 
This message has been scanned for viruses and dangerous content by MailScanner, and is
believed to be clean.