[Avcheck] Symantec CarrierScan

Michael Tokarev mjt@tls.msk.ru
Wed, 05 Jun 2002 00:50:12 +0400


> Claus Tepper wrote:
> 
> Hi,
> 
> I need to use Symantec CarrierScan as a AV scanner and hoped
> anyone has worked with avcheck and Carrierscan. If not, I need
> to modify avcheck so that it send files to CarrierScan. How do
> I go about this?

I've never heard of CarrierScan before.  Avcheck was written for
a virusscanner that is:

 - runs as a daemon and uses some sort of control interface to
   tell it which file should be scanned and to report result back
 - uses open (read: documented somewhere) protocol, so it is possible
   to implement it in avcheck
 - has ability to "deMIME" email format, that is, find all attachments
   and scan those inside a virusscanning daemon.

For now, I know only 2 AV products of such sort, both are supported
by avcheck.  There is another one very close, sophie (sophos AV
engine and GPLed daemon), but sophos's ability to handle MIME is
somewhat weak (but this well may change).  May be there are other
such products exists as well (e.g. RAV antivirus), but I don't know
that (RAV for example uses undocumented protocol between daemon and
it's client, so it is possible to licence RAV per email domain
(it's the client who enforces a licence, obviously avcheck will
not do the same).

Again, I know nothing about CarrierScan.  It maybe that it has it's
own postfix/whatether client/solution.
 
/mjt