Facebook
Twitter
andreios
Regular Pleskian
This is Ubuntu LTS 20.04 with Plesk Obisidian Version 18.0.42
I have installed Clamav with Spamassassin like this. This moves every infected mail to the spam folder. But it adds the original mail including the virus as attachment. How do I remove the virus from this mail?
This is what I have done so far.
Added new file called /etc/spamassassin/clamav.pm with this content:
Addedd on bottom of /etc/spamassassin/local.cf
I have installed Clamav with Spamassassin like this. This moves every infected mail to the spam folder. But it adds the original mail including the virus as attachment. How do I remove the virus from this mail?
This is what I have done so far.
Code:
apt install clamav libclamav-client-perl clamav-unofficial-sigsAdded new file called /etc/spamassassin/clamav.pm with this content:
Perl:
package ClamAV;
use strict;
# version 2.0, 2010-01-07
# - use SA public interface set_tag() and add_header, instead of
# pushing a header field directly into $conf->{headers_spam}
# our $CLAMD_SOCK = 3310; # for TCP-based usage
our $CLAMD_SOCK = "/var/run/clamav/clamd.ctl";
use Mail::SpamAssassin;
use Mail::SpamAssassin:lugin;
use Mail::SpamAssassin::Logger;
use File::Scan::ClamAV;
our @ISA = qw(Mail::SpamAssassin:lugin);
sub new {
my ($class, $mailsa) = @_;
$class = ref($class) || $class;
my $self = $class->SUPER::new($mailsa);
bless($self, $class);
$self->register_eval_rule("check_clamav");
return $self;
}
sub check_clamav {
my($self, $pms, $fulltext) = @_;
dbg("ClamAV: invoking File::Scan::ClamAV, port/socket: %s", $CLAMD_SOCK);
my $clamav = new File::Scan::ClamAV(port => $CLAMD_SOCK);
my($code, $virus) = $clamav->streamscan(${$fulltext});
my $isspam = 0;
my $header = "";
if (!$code) {
my $errstr = $clamav->errstr();
$header = "Error ($errstr)";
} elsif ($code eq 'OK') {
$header = "No";
} elsif ($code eq 'FOUND') {
$header = "Yes ($virus)";
$isspam = 1;
# include the virus name in SpamAssassin's report
$pms->test_log($virus);
} else {
$header = "Error (Unknown return code from ClamAV: $code)";
}
dbg("ClamAV: result - $header");
$pms->set_tag('CLAMAVRESULT', $header);
# add a metadatum so that rules can match against the result too
$pms->{msg}->put_metadata('X-Spam-Virus',$header);
return $isspam;
}
1;Addedd on bottom of /etc/spamassassin/local.cf
Perl:
loadplugin ClamAV clamav.pm
full CLAMAV eval:check_clamav()
describe CLAMAV Clam AntiVirus detected a virus
score CLAMAV 15
add_header all Virus _CLAMAVRESULT_
Code:
service spamassassin restart
