Re: [Evolution] RFE

[guenther <guenther rudersport de>]

A few notes, mostly straight copy-n-paste from previous posts to this
list.

On Wed, 2006-05-17 at 03:05 +0200, Andre Klapper wrote:
> Am Mittwoch, den 17.05.2006, 06:25 +0530 schrieb G Rajesh:

> > I wish two features could be available in evolution. Is there any plans
> > to get them included already?
> > 1. A plugin to scan for virus (with clamav) so that windows system in a
> > network will not be affected.

Evolution can *not* be talked into spreading any Windows virus
automatically by an incoming mail.

The most common purpose of running a virus scanner for Linux machines
simply is to get rid of those annoying buggers, without the need to
manually delete/move them. Plus, you get some (limited) phishing
protection by ClamAV.

[update]  Phishing signatures are currently being added quite
extensively to ClamAV.


> not needed.
>
> using clamav is already possible by using evolution filters.
>
> after installing clamav, you can add a message filter in evolution
> ("edit | message filters").
> under "If", choose "Pipe to Program", and add the path to clamav:
>       /usr/bin/clamscan --quiet -
> (the "-" sign at the end of the field pipe to program is important.)
> then add "return | 1".
> under "Then", you can for example choose to move the infected mails to a
> seperate folder followed by a "Stop Processing" rule.
> if you put that filter rule on the top of your filters, it should work.

As has been mentioned a few times on this list and originally on the
ClamAV users list. See this post of mine:

  http://lurker.clamav.net/message/20050618.021205.f1ab6d55.en.html


A quick note which I unfortunately forgot to mention in the original
post to the ClamAV list as well:

Add a second action to the THEN part, namely "Stop Processing".


In fact, when setting up filters you always should take care to add
"Stop Processing" as last action to *any* filter that is meant to be a
final filter. After moving a mail, you most likely do not want any other
(later) filter to match on this mail, too.

Failing this has caused confusion in the past, and always will...

...guenther


-- 
char *t="\10pse\0r\0dtu\0  ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}