[pmg-devel] Spam scanning after virus is found
Dietmar Maurer
dietmar at proxmox.com
Wed Apr 18 10:17:24 CEST 2018
> Seems that the sa scan is not triggered ony if clamav heuristic is in place.
> I've added something like just before the if :
>
>
> if ( $queue->{vinfo_avast} ) {
> my $score = 5 ;
> my $descr = "Avast Virus: 1";
> my $rule = 'AvastVirusFound';
> $sa_score += $score;
> $list .= $list ? ",$rule" : $rule;
> push @$sa_scores, { score => $score, rule => $rule, desc => $descr
> };
> }
>
> And in this way when avast found eicar the spam scan is not triggered and
> the only rule found is AvastVirusFound.
You could simply add:
return undef if $queue->{vinfo};
but this also skips user blacklist/whitelist, so the whole rule systems does not
work
as expected in that case ...
More information about the pmg-devel
mailing list