[Avcheck] Antivirus with Postfix and DrWeb

[Michael Tokarev]

Nicolai Strom Gylling wrote:
> 
[]
> Now at least i get some logging, and can see why nothing happened, DrWeb.log:
> 
> Tue Jan 22 11:23:09 2002 /var/spool/drwebtest/18908.tmp - read error!

Hmm.  This is even more interesting.  Avcheck must catch this error
as well!  Ah, I understand now.  Aha!... ;)

Sergey, do you remember our talk about read errors from DrWeb?  From
the avcheck changelog:

  2001-11-09  Michael Tokarev  <mjt@corpit.ru>
        * Version 0.6

        * Added minor relaxing for DrWeb.  DrWeb will return READ_ERROR
        condition for broken or incomplete .doc files.  For now, avcheck
        ignores this error (to be cleaned up later when DrWeb will return
        proper (CRC_ERROR?) error code).  This should not hurt anything,
        since in case of real read error the same error will show when
        avcheck will read saved message back, and it will report this
        condition correctly.

So, as you see, avcheck now ignores DRERR_READ_ERROR code returned from
drwebd.  And this explains why nothing happened...

With this avcheck modification, current avcheck+drweb behaviour is pretty
like avp's one: "ignore all errors".  And I was wrong, ignoring read error
in avcheck in fact does hurt something, and here we see an example.

But I'm afraid I can't do anything here: avcheck can't ignore read error
returned by drweb, and can't defer mail in case such an error.  Proper
solution will be to fix drweb.  For now, I'll add logging of this fact
into avcheck -- the only program path in avcheck that will use syslog.

Regards,
 Michael.