So these are the options I'm planning on passing uvscan:
--secure --fam --mime --mailbox --macro-heuristics

I did some testing on my quarintine directory and I seem to get the same
results as you.

So if I'm only using uvscan and spamassassin, and no other virus scanners I
can safely bypass the code in QS that does all the reformine and unziping to
see a speed increase, correct?  I'm not sure how hard that would be to do, I
need to look at it's code more.  I think the only thing I would lose by
doing this is QS built in checking for bad MIME headers and the such.  Can
you think of anything else that this might break?



> -----Original Message-----
> From: Dallas L. Engelken [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 30, 2003 9:43 AM
> To: Jeremy Kusnetz; [EMAIL PROTECTED]
> Subject: RE: [Qmail-scanner-general]Trying to daemonize uvscan through
> spamd
> 
> 
> > -----Original Message-----
> > From: Jeremy Kusnetz [mailto:[EMAIL PROTECTED] 
> > Sent: Thursday, May 29, 2003 5:01 PM
> >
> > Actually I'm now looking at the uvscan docs, it seems by 
> > adding --mime and --mailbox to uvscan it should handle the 
> > unpacked email by itself.  Maybe these should be added to 
> > qmail-scanner itself?  Also qmail-scanner sets the --secure 
> > option, which activates --unzip, so should --unzip be taken 
> > out of qmail-scanner?
> >  
> 
> make sure you dont use --maxfilesize on your command line call, or it
> will break mime/mailbox detection....  see below, a scan on the same
> mailbox message.
> 
> [EMAIL PROTECTED] qmailscan]#  /usr/local/bin/uvscan -v --summary --secure
> --mime --mailbox --fam --macro-heuristics --maxfilesize 20
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> Scanning
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> Scanning file
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> 
> Summary report on
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> File(s)
>         Total files: ...........       1
>         Clean: .................       1
>         Possibly Infected: .....       0
> 
> [EMAIL PROTECTED] qmailscan]#  /usr/local/bin/uvscan -v --summary --secure
> --mime --mailbox --fam --macro-heuristics
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> Scanning
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> Scanning file
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> Scanning file
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931
> 065/000008
> 23.EML
> Scanning file
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931
> 065/145224
> 3Lg.jpg
> Scanning file
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931
> 065/137905
> 0Lg.jpg
> 
> Summary report on
> /var/qmail/qmailscan/working/new/mailgw.nmgi.com10543019455931065
> File(s)
>         Total files: ...........       4
>         Clean: .................       4
>         Possibly Infected: .....       0
> 


-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to