Hi. Use clamav + spamassassin + postfix. Use /var/lib/archive.zmd and archive.rmd]
clamav]# more archive.rmd Block.EXE-rar:0:\.exe$:*:*:*:*:*:* Block.COM-rar:0:\.com$:*:*:*:*:*:* Block.VBS-rar:0:\.vbs$:*:*:*:*:*:* Block.BAT-rar:0:\.bat$:*:*:*:*:*:* Block.PIF-rar:0:\.pif$:*:*:*:*:*:* Block.SCR-rar:0:\.scr$:*:*:*:*:*:* Block.HTA-rar:0:\.hta$:*:*:*:*:*:* Block.JS-rar:0:\.js$:*:*:*:*:*:* Block.CMD-rar:0:\.cmd$:*:*:*:*:*:* Block.CHM-rar:0:\.chm$:*:*:*:*:*:* Block.CPL-rar:0:\.cpl$:*:*:*:*:*:* Block.JSP-rar:0:\.jsp$:*:*:*:*:*:* Block.REG-rar:0:\.reg$:*:*:*:*:*:* Block.VBE-rar:0:\.vbe$:*:*:*:*:*:* Block.LNK-rar:0:\.lnk$:*:*:*:*:*:* Block.DLL-rar:0:\.dll$:*:*:*:*:*:* Block.SYS-rar:0:\.sys$:*:*:*:*:*:* Block.WSF-rar:0:\.wsf$:*:*:*:*:*:* Block.fool.xxx.exe:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* Block.fool.xxx.com:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* clamav]# more archive.zmd Block.EXE-zip:0:\.exe$:*:*:*:*:*:* Block.COM-zip:0:\.com$:*:*:*:*:*:* Block.VBS-zip:0:\.vbs$:*:*:*:*:*:* Block.BAT-zip:0:\.bat$:*:*:*:*:*:* Block.PIF-zip:0:\.pif$:*:*:*:*:*:* Block.SCR-zip:0:\.scr$:*:*:*:*:*:* Block.HTA-zip:0:\.hta$:*:*:*:*:*:* Block.JS-zip:0:\.js$:*:*:*:*:*:* Block.CMD-zip:0:\.cmd$:*:*:*:*:*:* Block.CHM-zip:0:\.chm$:*:*:*:*:*:* Block.CPL-zip:0:\.cpl$:*:*:*:*:*:* Block.JSP-zip:0:\.jsp$:*:*:*:*:*:* Block.REG-zip:0:\.reg$:*:*:*:*:*:* Block.VBE-zip:0:\.vbe$:*:*:*:*:*:* Block.LNK-zip:0:\.lnk$:*:*:*:*:*:* Block.DLL-zip:0:\.dll$:*:*:*:*:*:* Block.SYS-zip:0:\.sys$:*:*:*:*:*:* Block.WSF-zip:0:\.wsf$:*:*:*:*:*:* Block.fool.xxx.exe:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* Block.fool.xxx.com:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* Tried to sent exe-file in rar archive - clamd said "CLEAN" :( Where is detailed documentation about possibilities of clamav? Regards Serg +7 903 719-29-90 livi...@itprofservice.ru _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
