Re: Clam AntiVirus plugin for SpamAssassin 3.x

[James Lees Vodanovich <ji...@comdotcom.com.au>]

I use Amavis which nicly incorporates clamd and spamassasin together, it also 
supports just about every other (unix) anti virus package and in fact will 
allow the use of two, as well as dspam. Plus other features.


On Wednesday 12 January 2005 07:31, Justin Mason wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Daryl C. W. O'Shea writes:
> > Troels Walsted Hansen wrote:
> > > I created a small plugin using the new plugin API in SpamAssassin 3.x.
> > > The plugin connects to a local ClamAV server (through TCP) and checks
> > > the email for virus. If a virus is found, it returns a positive return
> > > code to indicate spam and sets the header "X-Spam-Virus: Yes
> > > ($virusname)".
> >
> > Well sort of.  The headers only get set if the message ends up being
> > classified as spam.  If you receive a virus from a whitelisted user, or
> > in a message that would otherwise score less than -5.0 (at least with
> > the default score CLAMAV 10), the X-Spam-Virus: Yes ($virus) header
> > won't be added since the headers are only added to %headers_spam.  Of
> > course, clean messages won't have a header added in ham messages either.
> >
> > Adding the "Virus" headers to the headers_ham hash, as in the attached
> > file, correct this.
> >
> > Otherwise a pretty cool plugin for those who can't for whatever reason
> > do it another way.
>
> Hi Daryl --
>
> I've been thinking about this -- the ability for plugins to add
> headers.
>
> If a plugin can add new template-tags (as described in
> Mail::SpamAssassin::Conf), and the plugin's config file then
> sets them using add_header, that should work, right?
> That would be the best way to do it I think.
>
> - --j.
>
> > Daryl
> >
> > --------------030204020505030202030005
> > Content-Type: text/plain;
> >  name="clamav.pm"
> > Content-Transfer-Encoding: 7bit
> > Content-Disposition: inline;
> >  filename="clamav.pm"
> >
> > package ClamAV;
> > use strict;
> > use Mail::SpamAssassin;
> > use Mail::SpamAssassin::Plugin;
> > use File::Scan::ClamAV;
> > our @ISA = qw(Mail::SpamAssassin::Plugin);
> >
> > sub new {
> >   my ($class, $mailsa) = @_;
> >   $class = ref($class) || $class;
> >   my $self = $class->SUPER::new($mailsa);
> >   bless ($self, $class);
> >   $self->register_eval_rule ("check_clamav");
> >   return $self;
> > }
> >
> > sub check_clamav {
> >   my ($self, $permsgstatus, $fulltext) = @_;
> >   my $av = new File::Scan::ClamAV(port => 3310);
> >   my ($code, $virus) = $av->streamscan(${$fulltext});
> >   if(!$code) {
> >     my $errstr = $av->errstr();
> >     Mail::SpamAssassin::Plugin::dbg("ClamAV: Error scanning: $errstr");
> >     $permsgstatus->{main}->{conf}->{headers_spam}->{"Virus"} = "Error
> > ($errstr)"; $permsgstatus->{main}->{conf}->{headers_ham}->{"Virus"} =
> > "Error ($errstr)"; } elsif($code eq 'OK') {
> >     Mail::SpamAssassin::Plugin::dbg("ClamAV: No virus detected");
> >     $permsgstatus->{main}->{conf}->{headers_spam}->{"Virus"} = "No";
> >     $permsgstatus->{main}->{conf}->{headers_ham}->{"Virus"} = "No";
> >   } elsif($code eq 'FOUND') {
> >     Mail::SpamAssassin::Plugin::dbg("ClamAV: Detected virus: $virus");
> >     $permsgstatus->{main}->{conf}->{headers_spam}->{"Virus"} = "Yes
> > ($virus)"; $permsgstatus->{main}->{conf}->{headers_ham}->{"Virus"} = "Yes
> > ($virus)"; return 1;
> >   }
> >   return 0;
> > }
> >
> > 1;
> >
> > --------------030204020505030202030005--
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.5 (GNU/Linux)
> Comment: Exmh CVS
>
> iD8DBQFB5DeuMJF5cimLx9ARAny2AKCCGWLm4Adit5usW042iG5mBpvKIACfTyCj
> asZcgRE3jfTQBwAQZ7/YbR4=
> =prox
> -----END PGP SIGNATURE-----