[KyaPanel-Users] RES: CLAMAV

Anahuac anahuac at anahuac.biz
Wed May 13 17:10:45 EDT 2009


Roberto Almeida escreveu:
> Anahuac wrote:
>   
>> Roberto Almeida escreveu:
>>   
>>     
>>> Uso a versão 2.2 e também não está pegando nada como vírus no email.
>>>
>>> no kya-filter.sh ta assim:
>>>
>>> viruscan_action() {
>>>         VIRUS=`$AVCMD $file_mail`
>>>         VIRUS_RES=$?
>>>         if [ "$VIRUS_RES" = "1" ]; then
>>> .................
>>>
>>>
>>> Troquei a linha VIRUS=`$AVCMD $file_mail` pela VIRUS=`$AVCMD - < 
>>> $file_mail | grep -w FOUND$`  e começou a pegar todos email como vírus.
>>>   
>>>     
>>>       
>> Sinistro.... teste na mão e vai ver que não pode ser....
>> como está o IF abaixo dessa linha?
>>
>>
>>
>>
>>   
>>     
> viruscan_action() {
>         VIRUS=`$AVCMD $file_mail`
>         VIRUS_RES=$?
>         if [ "$VIRUS_RES" = "1" ]; then
>   

troque por:

VIRUS=`eval $AVCMD - < $file_mail | grep -w FOUND$`
        if [ "$VIRUS" != "" ]; then


>                 $POSTLOG -t postfix/kya-filter $MSGID: from=\<$FROM\> 
> to=\<$RCPTS\>, status=deferred \(Virus\)
>
>                 if [ "$TO_LOCAL" = "0" ] ; then
>
>                         SUBJECT=`ldapsearch -h $LDAP_HOST -x -D $LDAP_DN 
> -w $LDAP_PW -b "$MODULE_MAIL_LDAP_TOP,$LDAP_SUFFIX" -LLL "(ou=$KYADOM)" 
> DomainAVReturnMessSubject  2>&1 | grep -v "Additional information" | sed 
> -e :a -e '$!N;s/\n //;ta' -e 'P;D' | grep -v "dn: ou="`
>                         if [ "$SUBJECT" != "" ] ; then
>                                 # Message blocked
>                                 TEXT=`ldapsearch -h $LDAP_HOST -x -D 
> $LDAP_DN -w $LDAP_PW -b "$MODULE_MAIL_LDAP_TOP,$LDAP_SUFFIX" -LLL 
> "(ou=$KYADOM)" DomainAVReturnMess  2>&1 | grep -v "Additional 
> information" | sed -e :a -e '$!N;s/\n //;ta' -e 'P;D' | grep -v "dn: 
> ou=" | tr -d " \n"`
>
>                                 # Getting decoded TEXT
>                                 SUBST_USER="$TO"
>                                 ATTR_MESS="DomainAVReturnMess"
>                                 TEXT=`get_message`
>
>                                 # Fix Subject
>                                 ATTR_SUB="DomainAVReturnMessSubject"
>                                 SUBJECT=`get_dom_subject`
>
>                                 SUBJECT1=`echo $SUBJECT | cut -d\; -f1`
>                                 SUBJECT=`echo $SUBJECT | cut -d\; -f2-`
>                                 if [ "$SUBJECT1" = "base64" ] ; then
>                                         DOM_SUB="$SUBJECT1"
>                                 fi
>
>                                 if [ "$FROM_LOCAL" = "0" ] ; then
>                                         send_local_message
>                                 else
>                                         if [ "$DOM_SUB" = "base64" ] ; then
>                                                 
> SUBJECT="=?UTF-8?B?$SUBJECT?="
>                                         fi
>                                         echo "From: MAILER-DAEMON 
> <mailer-daemon@$MYHOSTNAME>
> Subject: $SUBJECT
> To: $FROM
>
> $TEXT
>
>  " | $SENDMAIL -f MAILER-DAEMON -- $FROM
>                                 fi
>                         fi
>                 fi
>
>                 # This get to who the alert will be sent
>                 TEST=`ldapsearch -h $LDAP_HOST -x -D $LDAP_DN -w 
> $LDAP_PW -b "$MODULE_MAIL_LDAP_TOP,$LDAP_SUFFIX" -LLL "(ou=$KYADOM)" 
> DomainAVSendto  2>&1 | grep -v "Additional information" | sed -e :a -e 
> '$!N;s/\n //;ta' -e 'P;D' | grep -v "dn: ou=" | grep DomainAVSendto: | 
> cut -d" " -f2-`
>
>                 if [ "$TEST" != "" ] ; then
>                         VIRUS2=`echo $VIRUS | cut -d: -f2-`
>                         AV_SUBJECT="Postmaster Copy: VIRUS Detected"
>                         TEXT=`echo "
>
> A message from ($FROM) to ($RCPTS) whas been rejected because of Virus.
>
> Virus founded: $VIRUS2
>
> "`
>                         IFS=";"
>                         for EACH in "$TEST" ; do
>                                 if [ ! -z "$EACH" ] ; then
>                                         if [ "$FROM_LOCAL" = "0" ] ; then
>                                                 SUBJECT="Postmaster 
> Copy: VIRUS Detected"
>                                                 DOM_SUB=""
>                                                 LOCAL_MAIL="${LOCAL_MAIL}2"
>                                                 send_local_message
>                                         else
>                                                 echo "From: 
> MAILER-DAEMON <mailer-daemon@$MYHOSTNAME>
> Subject: $AV_SUBJECT
> To: $EACH
>
> $TEXT
>
>  " | $SENDMAIL -f MAILER-DAEMON -- $EACH
>                                         fi
>                                 fi
>                         done
>                 fi
>
>                 exit 0
>         fi
> }
>
>
>
>   


-- 

Anahuac de Paula Gil
Diretor Geral
Projeto KyaPanel 
http://www.kyapanel.com



More information about the KyaPanel mailing list