ClamAV

From Halon, SMTP software for hosting providers
Jump to: navigation, search

The open-source anti-virus engine ClamAV is included in the Halon platform. It allows you to get a second opinion to the commercial anti-virus that's also included.

Usage

ClamAV can be invoked using the ScanCLAM() function in the DATA script, or via the graphical "Anti-virus" flow chart block.

if (ScanCLAM()) Reject("ClamAV thinks your message contains a virus"); 

Skip certain signatures

This example filter various heuristics detection from the ClamAV antivirus engine, which may be useful if these apply to you on regular basis preventing unwanted false-positives.

// ClamAV check
function ScanCLAM()
{
    
$skip = ["Xls.Exploit.EmbeddedFlash-1"];
    
$clam = [];
    foreach (
builtin ScanCLAM() as $v)
       if (!
in_array($v$skip))
           
$clam[] = $v;
    return 
$clam;