Feature #6
Filters for body part of the message
| Status: | New | Start: | 09/07/2009 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assigned to: | - | % Done: | 0% |
|
| Category: | EasyPush Server Manager | |||
| Target version: | 3.4 |
Description
Actually the administrator can filter only email header but it's better to filter also the body part of the message.
At this moment I have resolved the problem by adding personal signatures to clamav engine... but I think this is not the right way. The script is:
#!/bin/sh
tmpfile=/tmp/tmpClamSign
echo $1 | sigtool --hex-dump > $tmpfile
echo $2=`sed s/..$//g $tmpfile` >> /var/lib/clamav/daily.inc/$3
sv t clamd
Save it, for example, as AddClamSign.sh and add the execution bit.
Now you can add a signature executing:
./AddClamSign.sh TextToSearch Trojan.Name company.db