#10 Logging virus accesses only

[Anonymous]

Hi

I would like to log only virus accesses in order to don't have a large log file. I'm think about using ACLs to do that but it seems that the acl type that can help me to do that is missing (for instance icap_resp_status). With that acl type I can have the following configuration:

acl VirusFound icap_resp_status 200
LogFormat VirusLog "%>a %un %tl %>ho %{virus_scan:virus}Sa %is"
AccessLog /var/log/virus.log VirusLog VirusFound

OR

Maybe there is a better soltion without any new feature in c-icap. I would appreciate it if you could avise.

Best regards,