XMailforum is a readonly knowledge archive now.

Registering as a new user or answering posts is not possible anymore.

Might the force be with you, to find here what you are looking for.

2019-09-20 - hschneider, Admin

Cookie Disclaimer: This forum uses only essential, anonymous session cookies (xmailforum*), nothing to be scared of.

XMail Forum [Powered by Invision Power Board]

Printable Version of Topic
Click here to view this topic in its original format

XMail Forum > Announcements > XAV Update

Posted by: hschneider Oct 17 2003, 06:40 AM

QUOTE

Hello,

Check out http://software.dolist.net/xav.asp

If you know another MIME decoder that's support more format than MPACK, feel free to send us your parameters. The same for command line antivirus software, and we will add it to the package to make it available to others.

16.oct.2003 - D.Olivier - Fixed problem with some temp directories. Also added in .ini file entry to use MimeQP decode and F-Prot. 11.sep.2003 - D.Olivier - Added custom reject message (XAVMessage entry). 22.aug.2003 - J.Laffitte - now, seems to run on major unix systems. 19.aug.2003 - J.Laffitte - Timestamp in log added. Debug mode enhanced to log every message analyzed. 08.aug.2003 - J.Laffitte - temporary files and its directories are deleted in depth. Files in keep directory are named incrementaly if the filename is already used. 05.aug.2003 - J.Laffitte - replace the mkdir, chdir and rmdir functions by their equivalents in win32 api : CreateDirectory, SetCurrentDirectory and RemoveDirectory.

Regards,
--
DOLIST Technical Center __________________________________________________

DOLIST.NET, Internet E-mail List Server Technology
DOLIST information at : http://www.dolist.net

Posted by: cinor Oct 17 2003, 07:19 AM

There is no need to mime decode message for f-prot dos version ! F-prot team update f-prot package for dos to handle eml file type and decode very well mime message's, I have tested myself and work very good even with swen variant's !

Posted by: hschneider Oct 17 2003, 09:12 AM

Thanks for this valuable hint!

Posted by: AARONEDW Feb 5 2004, 07:54 AM

I am having trouble getting XAV to run on my win2k system. I have installed XAV into c:\xav. I also have f-prot installed in c:\f-prot. I have read as much documentation as I could, and looked at the source code included. I must be missing something. It is allowing the eicar file through when using munpack.exe, when set to use mimeqp, no messages get through. I have xav set to debug and the .\keep dir under xav. nohing goes there. I am throughly confused as to why this is doing this. I would appereciate any help.
Aaron (Total NuBee)

Posted by: Bhozar Feb 9 2004, 01:14 PM

Try starting the xmail service as a local user account or a local administrator account. Test it again and see if it works then.

Posted by: Bhozar Feb 9 2004, 01:16 PM

Here is the info you would need to use XAV with Sophos AV.

Add this into the xav.ini file. You have to start the xmail service as a local user account (possibly an admin user) for this to work correctly.

; -- Product home page: http://www.sophos.com
; -- Tested with Sophos AV
; -- Please note: XMail service must be started as a local user or sav32cli will not work
AntivirusPath="C:\Program Files\Sophos SWEEP for NT\SAV32CLI.EXE"
AntivirusCommand= -ss -archive
AntivirusReturn=3

Posted by: CoolGui Mar 4 2004, 12:18 AM

hmm... f-prot DOS doesn't work with long filename -- this script seems to copy the message to a long file name (longer than 8.3)... I don't see how any might have gotten it working.

Well I guess I could modify the C to trunicate the filename to 8 char...

Posted by: Nando Mar 4 2004, 07:06 PM

Was same for me. I had to modify c source.
There is also the dir issue (same name as the temp file).

Posted by: CoolGui Mar 4 2004, 08:36 PM

QUOTE (Nando @ Mar 4 2004, 07:06 PM)

Was same for me. I had to modify c source.
There is also the dir issue (same name as the temp file).

The website says modifactions are welcome -- would you be willing to share?

Thanks!

Posted by: Nando Mar 5 2004, 12:24 AM

No prob., this weekend I'll post you the code.

Posted by: Nando Mar 7 2004, 10:51 PM

I've posted the code to the Scripting Corner Thread

Let me know