----- Original Message ----- From: "Bart Silverstrim" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 14, 2004 2:51 PM Subject: [Clamav-users] clamav and procmail
> Hello, > > I'm trying to integrate a clamav with a simple sitewide procmail recipe > to run clamscan-procfilter then take action if the headers contain the > virus tag (X-CLAMAV). The first part of the recipe in the script makes > sense... > ***** > # :0fw: virus1.lock > # > # |/usr/local/bin/clamscan-procfilter.pl > # > ***** > > But the second one just rewrites the subject, as I understand it. > **** > # :0fw: virus2.lock > # > # * ^X-CLAMAV > # > # |/usr/bin/formail -i "Subject: [CLAMAV VIRUS ALERT]" > # > **** > > What I would like for procmail to do is not just rewrite the subject, > but also change the recipient so the recipient never sees the virus > message and instead another user (like [EMAIL PROTECTED]) > would get the email and attachment, and that will keep the end user > from having to ever create filter rules. > > Is there a way to do this? Thanks! I use the clamassassin script to call clamdscan, but the procmail principle is the same to do what you want. My /etc/procmailrc is: :0fw | /root/clamassassin-1.2.1/clamassassin :0: * ^X-Virus-Status: Yes /home/john/Virus So the virus-laden email is deposited in a directory that I occasionally look at via IMAP and SquirrelMail, but you could also substitute /dev/null in the last line above. - John ------------------------------------------------------- This SF.Net email is sponsored by: thawte's Crypto Challenge Vl Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam Camcorder. More prizes in the weekly Lunch Hour Challenge. Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
