james-server-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vincenzo Gianferrari Pini" <vincenzo.gianferrarip...@praxis.it>
Subject RE: Antivirus matcher available [virus check ok]
Date Thu, 06 Mar 2003 14:20:24 GMT
I'm resending because the zip attachment didn't go out, I don't know why.
Hope it will now.

This time the zip does not contain the test virus file, as my James server
would now stop it.

Sorry and ciao,

Vincenzo

> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: giovedì 6 marzo 2003 12.37
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> Hi everybody,
>
> I took Cesar's antivirus matcher and made some changes to it:
>
> 1) Made it more OS independent (using System Property "file.separator").
> 2) Made it more AV software independent, using a "command line prototype"
> and a list of the valid exit codes from the scanner.
> 3) If a virus is found nows it does a "mail.setErrorMessage" with
> the output
> or report of the scan.
> 4) It appends a small notification string to the message subject.
> 5) More exception handling.
> 6) Added some javadoc and made some cosmetic changes to the code (spacing,
> naming, indentation etc).
> 7) Changed the name of the matcher from HasVirus to IsInfected
> (just matter
> of taste) and changed to a package of mine. Do what you want.
>
> It seems to be working quite fine and fast; today I will put it in my
> production server and let you know.
>
> In the attached .zip file you'll find the java source, the single javadoc
> html page related to the class (where you can find some
> documentation about
> the config.xml setting and an usage example for McAfee VirusScan under
> Windows), and the "test" virus EICAR (not a real one - just a signature
> agreed among the antivirus makers); to use the latter just rename it from
> eicar.txt to eicar.com and attach it to your test messages.
>
> If you have a memory resident antivirus scanner (like VShield)
> guarding your
> James server machine, don't forget to exclude from such automatic
> scan: (1)
> the "temp" directory (where James copies some parts of the message during
> it's normal processing), (2) the temporary directory specified to this
> matcher as the place into which create "target directories" to
> scan with the
> command line scanner, and (3) the James directory itself (not
> sure of this).
>
> Everybody please feel free to use/change this matcher and let me
> know of any
> problems. I will keep it up to date if any bug is found.
>
> If anyone has any question let me know.
>
> Thank you all and thanks to Cesar Bonadio.
>
> Vincenzo
>
>
> > -----Original Message-----
> > From: Cesar Bonadio [mailto:bonadio@picture.com.br]
> > Sent: venerdì 21 febbraio 2003 23.19
> > To: james-user@jakarta.apache.org
> > Subject: Antivirus matcher available
> >
> >
> > Hello
> >
> > I just start to develop an antivirus matcher to james its now
> > been used as a test in our local network, its working fine
> >
> > I would like to share the code with others that can take a look at it
> > and work on improvements.
> >
> > The code and instructions can be found
http://www.intersearch.com.br/james
>
> Thanks



Mime
View raw message