Lee Yip Fei spake thusly on Thu, Feb 23, 2006 at 01:47:20AM -0800: > I run the following command in FreeBSD and it delete the entire mailbox when > there is a single email contain virus. > > clamscan --infected --recursive --remove > > The mailserver is exim, hosting control panel is cpanel. May I know what is > the correct command to have clamav to remove only the infected email but not > the entire mailbox? Thank you. > --- end quoted text ---
It might be best to find a scanning system that checks at the smtp level, rather than scanning the mailbox of the user manually. This would delete the virus as it's being transferred while preserving the message, and you wouldn't have the same issue of having the entire mailbox being deleted. For example, on my qmail server I run simscan (from inter7.com) to check for viruses in an email as the email is received by the server (simscan sits between the smtp and queuing parts of the process). If the message is clean it gets forwarded to the user account. If it is not clean, I drop the email. I'm not sure how exim functions, but there might be a similar method of doing scanning before delivery. At the least you could tag the email as containing a virus and let the user choose what to do with it. Regards, Richard -- Did this email or post help you? If so, please rate me at affero: http://rate.affero.net/RhunDraco
pgpJKG11GEmEG.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
