ClamAV

From Halon, SMTP software for hosting providers
Revision as of 12:09, 12 October 2016 by Erik (talk | contribs) (Created page with "The open-source anti-virus engine ClamAV is included in the Halon platform. It allow you to get a second opinion about viruses. == Usage == ClamAV can be used with the [[HSL]...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The open-source anti-virus engine ClamAV is included in the Halon platform. It allow you to get a second opinion about viruses.

Usage

ClamAV can be used with the HSL function; ScanCLAM in the DATA flow. It is also available in the graphical "Anti-spam" block.

if (ScanCLAM())
    
Reject("ClamAV thinks your message is contains a virus"); 

Skip certain signaturs

This example filter various heuristics detection from the ClamAV antivirus engine, which may be useful if these apply to you on regular basis preventing unwanted false-positives.

// ClamAV check
function ScanCLAM()
{
    
$skip = ["Xls.Exploit.EmbeddedFlash-1"];
    
$clam = [];
    foreach (
builtin ScanCLAM() as $v)
       if (!
in_array($v$skip))
           
$clam[] = $v;
    return 
$clam;