You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Cesar Bonadio <bo...@picture.com.br> on 2003/02/21 23:19:14 UTC
Antivirus matcher available
Hello
I just start to develop an antivirus matcher to james its now
been used as a test in our local network, its working fine
I would like to share the code with others that can take a look at it
and work on improvements.
The code and instructions can be found http://www.intersearch.com.br/james
Thanks
RE: Antivirus matcher available
Posted by "Noel J. Bergman" <no...@devtech.com>.
Testing before contacting infrastructure. Please ignore this message.
--- Noel
-----Original Message-----
From: Vincenzo Gianferrari Pini
[mailto:vincenzo.gianferraripini@praxis.it]
Sent: Thursday, March 06, 2003 13:02
To: James Users List
Subject: RE: Antivirus matcher available
Yes, I'm sure.
To be safe I checked to send from my James account to my James account, from
my James account to an outside account and vice-versa, and the zip was
properly received, so I imagine it was not in my part of the chain. The
problem only occurred through the list.
One week ago it happened when I sent a .java attachment to the list, but it
worked when I zipped it (you, Noel, told me that, remember?).
Bye,
Vincenzo
> -----Original Message-----
> From: Noel J. Bergman [mailto:noel@devtech.com]
> Sent: giovedì 6 marzo 2003 18.45
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> Zip files are allowed. You are sure that it was a zip? I
> thought that they
> had worked out the problems with attachments.
>
> --- Noel
>
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: Thursday, March 06, 2003 9:34
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> No way! There may be a problem with attachments in this list?
>
> If anybody wants it, just let me know that I will send it directly to him.
>
> Bye
>
> Vincenzo
>
> > -----Original Message-----
> > From: Vincenzo Gianferrari Pini
> > [mailto:vincenzo.gianferraripini@praxis.it]
> > Sent: giovedì 6 marzo 2003 15.20
> > To: James Users List
> > Subject: RE: Antivirus matcher available [virus check ok] [virus check
> > ok]
> >
> >
> > I'm resending because the zip attachment didn't go out, I don't
> know why.
> > Hope it will now.
> >
> > This time the zip does not contain the test virus file, as my
> James server
> > would now stop it.
> >
> > Sorry and ciao,
> >
> > Vincenzo
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: james-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available
Posted by "Noel J. Bergman" <no...@devtech.com>.
Vincenzo,
I understand. So what is different between what you did, and what I did? I
just sent a regular .ZIP file through the mailing list.
--- Noel
-----Original Message-----
From: Vincenzo Gianferrari Pini
[mailto:vincenzo.gianferraripini@praxis.it]
Sent: Thursday, March 06, 2003 13:02
To: James Users List
Subject: RE: Antivirus matcher available
Yes, I'm sure.
To be safe I checked to send from my James account to my James account, from
my James account to an outside account and vice-versa, and the zip was
properly received, so I imagine it was not in my part of the chain. The
problem only occurred through the list.
One week ago it happened when I sent a .java attachment to the list, but it
worked when I zipped it (you, Noel, told me that, remember?).
Bye,
Vincenzo
> -----Original Message-----
> From: Noel J. Bergman [mailto:noel@devtech.com]
> Sent: giovedì 6 marzo 2003 18.45
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> Zip files are allowed. You are sure that it was a zip? I
> thought that they
> had worked out the problems with attachments.
>
> --- Noel
>
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: Thursday, March 06, 2003 9:34
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> No way! There may be a problem with attachments in this list?
>
> If anybody wants it, just let me know that I will send it directly to him.
>
> Bye
>
> Vincenzo
>
> > -----Original Message-----
> > From: Vincenzo Gianferrari Pini
> > [mailto:vincenzo.gianferraripini@praxis.it]
> > Sent: giovedì 6 marzo 2003 15.20
> > To: James Users List
> > Subject: RE: Antivirus matcher available [virus check ok] [virus check
> > ok]
> >
> >
> > I'm resending because the zip attachment didn't go out, I don't
> know why.
> > Hope it will now.
> >
> > This time the zip does not contain the test virus file, as my
> James server
> > would now stop it.
> >
> > Sorry and ciao,
> >
> > Vincenzo
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: james-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
Yes, I'm sure.
To be safe I checked to send from my James account to my James account, from
my James account to an outside account and vice-versa, and the zip was
properly received, so I imagine it was not in my part of the chain. The
problem only occurred through the list.
One week ago it happened when I sent a .java attachment to the list, but it
worked when I zipped it (you, Noel, told me that, remember?).
Bye,
Vincenzo
> -----Original Message-----
> From: Noel J. Bergman [mailto:noel@devtech.com]
> Sent: giovedì 6 marzo 2003 18.45
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> Zip files are allowed. You are sure that it was a zip? I
> thought that they
> had worked out the problems with attachments.
>
> --- Noel
>
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: Thursday, March 06, 2003 9:34
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> No way! There may be a problem with attachments in this list?
>
> If anybody wants it, just let me know that I will send it directly to him.
>
> Bye
>
> Vincenzo
>
> > -----Original Message-----
> > From: Vincenzo Gianferrari Pini
> > [mailto:vincenzo.gianferraripini@praxis.it]
> > Sent: giovedì 6 marzo 2003 15.20
> > To: James Users List
> > Subject: RE: Antivirus matcher available [virus check ok] [virus check
> > ok]
> >
> >
> > I'm resending because the zip attachment didn't go out, I don't
> know why.
> > Hope it will now.
> >
> > This time the zip does not contain the test virus file, as my
> James server
> > would now stop it.
> >
> > Sorry and ciao,
> >
> > Vincenzo
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: james-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available
Posted by "Noel J. Bergman" <no...@devtech.com>.
Zip files are allowed. You are sure that it was a zip? I thought that they
had worked out the problems with attachments.
--- Noel
-----Original Message-----
From: Vincenzo Gianferrari Pini
[mailto:vincenzo.gianferraripini@praxis.it]
Sent: Thursday, March 06, 2003 9:34
To: James Users List
Subject: RE: Antivirus matcher available
No way! There may be a problem with attachments in this list?
If anybody wants it, just let me know that I will send it directly to him.
Bye
Vincenzo
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: giovedì 6 marzo 2003 15.20
> To: James Users List
> Subject: RE: Antivirus matcher available [virus check ok] [virus check
> ok]
>
>
> I'm resending because the zip attachment didn't go out, I don't know why.
> Hope it will now.
>
> This time the zip does not contain the test virus file, as my James server
> would now stop it.
>
> Sorry and ciao,
>
> Vincenzo
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available [virus check ok]
Posted by "Noel J. Bergman" <no...@devtech.com>.
Vincenzo,
I just downloaded your matcher, zipped it, and am attaching. Sending this
through my installation of James v2.1.2.
--- Noel
-----Original Message-----
From: Vincenzo Gianferrari Pini
[mailto:vincenzo.gianferraripini@praxis.it]
Sent: Friday, March 07, 2003 9:04
To: James Users List
Subject: RE: Antivirus matcher available [virus check ok]
I made a big performance improvement (added buffering to the "write to temp
dir" phase) to IsInfected (v 1.0.0/2).
I will try to attach a zip to this message; if you don't get it you can find
it in http://portale.praxis.it/pub/james/matchers.
Bye,
Vincenzo
RE: Antivirus matcher available [virus check ok]
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
I made a big performance improvement (added buffering to the "write to temp
dir" phase) to IsInfected (v 1.0.0/2).
I will try to attach a zip to this message; if you don't get it you can find
it in http://portale.praxis.it/pub/james/matchers.
Bye,
Vincenzo
>
RE: Antivirus matcher available
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
The Matcher code and html may be found at
http://portale.praxis.it/pub/james/matchers.
Bye,
Vincenzo
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: giovedì 6 marzo 2003 15.34
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> No way! There may be a problem with attachments in this list?
>
> If anybody wants it, just let me know that I will send it directly to him.
>
> Bye
>
> Vincenzo
>
> > -----Original Message-----
> > From: Vincenzo Gianferrari Pini
> > [mailto:vincenzo.gianferraripini@praxis.it]
> > Sent: giovedì 6 marzo 2003 15.20
> > To: James Users List
> > Subject: RE: Antivirus matcher available [virus check ok] [virus check
> > ok]
> >
> >
> > I'm resending because the zip attachment didn't go out, I don't
> know why.
> > Hope it will now.
> >
> > This time the zip does not contain the test virus file, as my
> James server
> > would now stop it.
> >
> > Sorry and ciao,
> >
> > Vincenzo
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: james-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
No way! There may be a problem with attachments in this list?
If anybody wants it, just let me know that I will send it directly to him.
Bye
Vincenzo
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: giovedì 6 marzo 2003 15.20
> To: James Users List
> Subject: RE: Antivirus matcher available [virus check ok] [virus check
> ok]
>
>
> I'm resending because the zip attachment didn't go out, I don't know why.
> Hope it will now.
>
> This time the zip does not contain the test virus file, as my James server
> would now stop it.
>
> Sorry and ciao,
>
> Vincenzo
>
---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org
RE: Antivirus matcher available [virus check ok]
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
I'm resending because the zip attachment didn't go out, I don't know why.
Hope it will now.
This time the zip does not contain the test virus file, as my James server
would now stop it.
Sorry and ciao,
Vincenzo
> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:vincenzo.gianferraripini@praxis.it]
> Sent: giovedì 6 marzo 2003 12.37
> To: James Users List
> Subject: RE: Antivirus matcher available
>
>
> Hi everybody,
>
> I took Cesar's antivirus matcher and made some changes to it:
>
> 1) Made it more OS independent (using System Property "file.separator").
> 2) Made it more AV software independent, using a "command line prototype"
> and a list of the valid exit codes from the scanner.
> 3) If a virus is found nows it does a "mail.setErrorMessage" with
> the output
> or report of the scan.
> 4) It appends a small notification string to the message subject.
> 5) More exception handling.
> 6) Added some javadoc and made some cosmetic changes to the code (spacing,
> naming, indentation etc).
> 7) Changed the name of the matcher from HasVirus to IsInfected
> (just matter
> of taste) and changed to a package of mine. Do what you want.
>
> It seems to be working quite fine and fast; today I will put it in my
> production server and let you know.
>
> In the attached .zip file you'll find the java source, the single javadoc
> html page related to the class (where you can find some
> documentation about
> the config.xml setting and an usage example for McAfee VirusScan under
> Windows), and the "test" virus EICAR (not a real one - just a signature
> agreed among the antivirus makers); to use the latter just rename it from
> eicar.txt to eicar.com and attach it to your test messages.
>
> If you have a memory resident antivirus scanner (like VShield)
> guarding your
> James server machine, don't forget to exclude from such automatic
> scan: (1)
> the "temp" directory (where James copies some parts of the message during
> it's normal processing), (2) the temporary directory specified to this
> matcher as the place into which create "target directories" to
> scan with the
> command line scanner, and (3) the James directory itself (not
> sure of this).
>
> Everybody please feel free to use/change this matcher and let me
> know of any
> problems. I will keep it up to date if any bug is found.
>
> If anyone has any question let me know.
>
> Thank you all and thanks to Cesar Bonadio.
>
> Vincenzo
>
>
> > -----Original Message-----
> > From: Cesar Bonadio [mailto:bonadio@picture.com.br]
> > Sent: venerdì 21 febbraio 2003 23.19
> > To: james-user@jakarta.apache.org
> > Subject: Antivirus matcher available
> >
> >
> > Hello
> >
> > I just start to develop an antivirus matcher to james its now
> > been used as a test in our local network, its working fine
> >
> > I would like to share the code with others that can take a look at it
> > and work on improvements.
> >
> > The code and instructions can be found
http://www.intersearch.com.br/james
>
> Thanks
RE: Antivirus matcher available
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
Hi everybody,
I took Cesar's antivirus matcher and made some changes to it:
1) Made it more OS independent (using System Property "file.separator").
2) Made it more AV software independent, using a "command line prototype"
and a list of the valid exit codes from the scanner.
3) If a virus is found nows it does a "mail.setErrorMessage" with the output
or report of the scan.
4) It appends a small notification string to the message subject.
5) More exception handling.
6) Added some javadoc and made some cosmetic changes to the code (spacing,
naming, indentation etc).
7) Changed the name of the matcher from HasVirus to IsInfected (just matter
of taste) and changed to a package of mine. Do what you want.
It seems to be working quite fine and fast; today I will put it in my
production server and let you know.
In the attached .zip file you'll find the java source, the single javadoc
html page related to the class (where you can find some documentation about
the config.xml setting and an usage example for McAfee VirusScan under
Windows), and the "test" virus EICAR (not a real one - just a signature
agreed among the antivirus makers); to use the latter just rename it from
eicar.txt to eicar.com and attach it to your test messages.
If you have a memory resident antivirus scanner (like VShield) guarding your
James server machine, don't forget to exclude from such automatic scan: (1)
the "temp" directory (where James copies some parts of the message during
it's normal processing), (2) the temporary directory specified to this
matcher as the place into which create "target directories" to scan with the
command line scanner, and (3) the James directory itself (not sure of this).
Everybody please feel free to use/change this matcher and let me know of any
problems. I will keep it up to date if any bug is found.
If anyone has any question let me know.
Thank you all and thanks to Cesar Bonadio.
Vincenzo
> -----Original Message-----
> From: Cesar Bonadio [mailto:bonadio@picture.com.br]
> Sent: venerdì 21 febbraio 2003 23.19
> To: james-user@jakarta.apache.org
> Subject: Antivirus matcher available
>
>
> Hello
>
> I just start to develop an antivirus matcher to james its now
> been used as a test in our local network, its working fine
>
> I would like to share the code with others that can take a look at it
> and work on improvements.
>
> The code and instructions can be found http://www.intersearch.com.br/james
>
> Thanks