....
 

Guardian Digital Inc. > InfoCenter > Mailing List Archives > Amavis

Amavis Mailing List Archive

About this list Date view Thread view Subject view Author view Attachment view

From: Paul B. Henson (henson@acm.org)
Date: Thu Dec 23 2004 - 15:22:27 EST

I have updated my SAVI-Perl module to the latest version of the Sophos API,
including the ability to dynamically reload virus data when it changes. I
have put together a patch to amavisd-new to support the new features.

with this patch applied, amavisd-new will initialize the SAVI object in the
parent, which will be inherited by the children. The children will detect
whenever the virus data is stale and automatically exit, and the parent
will reload the virus data before spawning new children. there is no need
to restart amavisd-new when definitions are updated.

The patch also updates the SAVI options to what I consider most likely
optimal (although you might want to review them for any local needs). in
addition, the current version of amavisd-new seems to only enable the MIME
option if the particular file being scanned is of the appropriate type. if
you are running with bypass_decode_parts enabled (which I do) this might
result in some nested file not being scanned appropriately. I modified
amavisd-new so it only disables MIME if bypass_decode_parts is not enabled.

you'll need the latest version of SAVI-Perl (currently .30) available from

        http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/dist/SAVI-Perl-0.30.tar.gz

in order to implement reloading virus data in the parent, I needed to make
a minor feature edition to Net-Server. Basically, I added a new hook that
gets called in the parent right before forking any children. I have
contacted the author of Net-Server to see if he would be willing to include
this feature in a future release but so far have not heard back. So, you'll
need to apply this small patch to Net-Server:

        http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/dist/Net-Server-0.87-parent_fork_hook-1.diff.gz

finally, the amavisd-new patch itself:

        http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/dist/amavisd-new-2.2.0-savi-1.diff.gz

This patch is based off of 2.2.0, I see Mark just released 2.2.1. I haven't
had a chance to see if this patch would apply cleanly to that version.

If you use Sophos SAVI, please try this out and let me know if you have any
problems or suggestions.

Thanks... 

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst  |  henson@csupomona.edu
California State Polytechnic University  |  Pomona CA 91768
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
About this list Date view Thread view Subject view Author view Attachment view
[ About Guardian Digital ] - [ Press Center ] - [ Contact Us ] - [ System Activation ] - [ Reseller Info ] - [ Online Store ] - [ Site Map ]
Copyright (c) 2000 - 2004 Guardian Digital, Inc. Linux Lockbox and EnGarde are Trademarks of Guardian Digital, Inc.