Hi,

Am Dienstag Februar 8 2005 22:33 schrieb Scott Ryan:
> If you cant / dont want to upgrade kmail, then i suggest running one
> filter (placed at the top of the filter list) to pipe the message
> through a command based on size (if message < 500k). Set that command
> to be clamscan (or clamdscan if running clamd) Ensure that this
> filter is *not* set to stop processing after matching.
> Then setup a second filter that will check the mail to see if it is a
> virus or not and then do with it what you please. 

I use the script clamassassin for filtering my emails.

http://drivel.com/clamassassin/

And you need also formail (included in procmail) and mktemp. It was 
installed on my System, so I didn't have to care about it.

I wanted to use the script with clamd, so:

./conigure --enable-clamdscan
make install

Then make sure, that a normal user can use it.

In kmail, I created two filters:

1. Clamassassin
Filter criteria
<size> 'ist greater than or equal'  '0 Bytes"
(I use this, because I want to check every email. But you free to change 
it, maybe that emails are checked lesser than 500 Bytes or so.)

Filter action
'Pipe through' '/usr/lib/local/clamassassin'  (belongs, where it is 
installed on your system)

Make sure 'If this filter matches, stop progressing here' is NOT set!


2. VirusCheck
filter criteria
<X-Virus-Status> 'contains' 'YES'

filter action
You can do with the email, what ever you want. I use
'File into Folder'
'Play Sound'
But it's up to you!

Set 'If this filter matches, stop progressing here'


These filters should be on to of your filter list!

If you want to know, which virus do you caught, it's written into the 
mail header.

I hope, this was helpful.


Karsten

-- 
I LIKE TO THINK I AM A PICKER-UP OF UNCONSIDERED TRIFLES. Death grinned
hopefully.
(Lords and Ladies)

-- 
The true prize was control. Lord Vetinari knew that. When heavy weights 
were balanced on the scales, the trick was to know where to place your 
thumb.
(The Fifth Elephant)
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to