Re: [AMaViS-user] Bypassing specific AV output

[Mark M. <Mar...@ij...>]

Asfihani,

> Is there is any idea on how to bypass specific output from command
> line virus scanner in amavisd-new? My system currently running well
> with current configuration, but our client need to bypass a macro
> scanning. The output of the scanner is VIRUS: W97M/Generic. I already
> read uvscan manual but unfortunately did not find any option for
> bypassing macro scan.

It might be possible to modify the uvscan AV entry in amavisd.conf
and replace the check for status, i.e. the [13], with a regexp to
parse the uvscan output, which may give you more flexibility.

The amavisd.conf-sample says:
...
#  4. an array ref of av scanner exit status values, or a regexp (to be
#     matched against scanner output), indicating NO VIRUSES found;
#     a special case is a value undef, which does not claim file to be clean
#     (i.e. it never matches, similar to []), but suppresses a failure warning;
#     to be used when the result is inconclusive (useful for specialized and
#     quick partial scanners such as jpeg checker);
#  5. an array ref of av scanner exit status values, or a regexp (to be
#     matched against scanner output), indicating VIRUSES WERE FOUND;
#     Note: the virus match prevails over a 'not found' match, so it is safe
#     even if the no. 4. matches for viruses too;


  Mark