# OdeiaVir configuration file
# Once you have everything up and running, you may want to delete the
# comment lines in order to speed up program execution.

# antivirus
# Selects which virus scanner product to use:
# 0 - McAfee VirusScan (uvscan)
# 1 - F-Prot
# 2 - Panda (pavcl)
# 3 - Sophos (sweep)
# 4 - InoculateIT (inocucmd)
# 5 - GeCAD RAV (ravav)
# 6 - Kaspersky (kavscanner)
# 7 - F-Secure (fsav)
# Default: -1 (all installed AVs)
# WARNING: The meaning of those numbers depends on the presence of the
# begin_av/end_av blocks (see below) as provided by the official OdeiaVir
# distribution!
#antivirus	-1

# warn_sender
# Sends a warning message to whoever sent a virus-infected message.
# Default: yes
#warn_sender	yes

# warn_recipient
# Sends a warning message to the local user who would receive a virus-infected
# message. Default: yes
#warn_recipient	yes

# extra_warning
# An optional extra recipient for virus warning messages. You can put
# a sysadmin's e-mail here. Default: no extra warning recipients.
#extra_warning	webmaster@mydomain.com

# originator
# Who the warning messages will appear to be coming from. You can set it
# if you have a human in charge of doing something about virus outbreaks,
# or if you don't want replies and have an address that goes to /dev/null.
# Default: webmaster@<recipient's domain>.
#originator	webmaster@mydomain.com

# openav_port
# Use OpenAntiVirus.org's ScannerDaemon in addition to (or instead of)
# conventional antivirus programs. This parameters specifies which port
# the daemon listens to. Default: do not use ScannerDaemon.
#openav_port	8127

# openav_first
# Sets whether to query the ScannerDaemon before or after conventional
# virus scanners. "no" means use ScannerDaemon only after any conventional
# scanner that may be installed. Default: yes
#openav_first	yes

# subject
# Subject line of the virus warning messages. The virus name will be
# appended to it. Suggestion: make it bilingual, just like the warning
# messages themselves. Default: "VIRUS WARNING :"
#subject	"AVISO DE VIRUS / VIRUS WARNING :"

# keep_viruses
# Specify a directory for storing virus-infected messages. Only the message
# text is saved, not the MIME parts. You can further explore the virus by
# running ripMIME manually on an infected message. Default: don't save
# infected messages.
#keep_viruses	var/odeiavir/infected

# temp_dir
# Directory for storing temporary files. Suggestion: use /dev/shm if your
# system supports it. Default: /tmp
#temp_dir	/tmp

# bin_mail_cmd
# Local delivery command for Sendmail. Put here what would go in the A=
# section of the Mlocal line in sendmail.cf -- except you'll have to use
# the complete path to the program. Default: "/bin/mail $u".
#bin_mail_cmd	/bin/mail $u

# allow_ns
# If set to "no", -ns command-line switch is ignored. Default: yes
#allow_ns	yes

# allow_nr
# If set to "no", -nr command-line switch is ignored. Default: yes
#allow_nr	yes

# allow_r
# If set to "no", -r command-line switch is ignored. Default: yes
#allow_r	yes

# allow_w
# If set to "no", -w command-line switch is ignored. Default: yes
#allow_w	yes

# allow_f
# If set to "no", -f command-line switch is ignored. Default: yes
#allow_f	yes

# allow_av
# If set to "no", -av command-line switch is ignored. Default: yes
#allow_av	yes

# allow_options
# If set to "no", command-line switches (and all allow_* options above)
# are ignored. Use if your users have write access to their .qmail files
# and you don't want them to change OdeiaVir's behavior. Default: yes
#allow_options	yes

# Antivirus definition section
# Blocks beginning with begin_av and ending with end_av define a command-line
# virus scanning interface. Allowed options inside begin_av/end_av are:
#       name            Name of the antivirus
#       program         Complete pathname of the antivirus executable
#       retval_virus    Which number the programs returns when it finds a virus
#       switches        Command-line switches
#       switches_after  Set to "yes" if the command-line switches must appear
#                       after the file name in the command line. Default: no
#       before_name     Text appearing before the virus name in program's
#                       standard output
#       after_name      Text appearing after the virus name in program's
#                       standard output. Leave undefined if virus name is the
#                       last thing in an output line.
#       before_name_alt String to use instead of before_name if the search
#                       using before_name / after_name fails.
#       after_name_alt  String to use instead of after_name if the search
#                       using before_name / after_name fails.
#       needs_ripmime   Set to "no" if program is capable of scanning
#                       MIME-encoded messages by itself. Default: yes
#       needs_filenames Set to "yes" if program won't accept a directory
#                       argument for scanning and will only accept a list
#                       of filenames. Default: no

begin_av
	name		McAfee
	program		/usr/local/bin/uvscan
	retval_virus	13
	switches	"--mime --unzip"
	before_name	"Found the "
	after_name	" virus !!!"
	before_name_alt	"Found: "
	after_name_alt	" NOT a virus"
	needs_ripmime	no
end_av

begin_av
	name		F-Prot
	program		/usr/local/f-prot/f-prot
	retval_virus	3
	switches	"-archive"
	before_name	" Infection: "
end_av

begin_av
	name		Panda
	program		/usr/bin/pavcl
	retval_virus	16
	switches	"-CMP"
	switches_after	yes
	before_name	"Found virus :    "
end_av

begin_av
	name		Sophos
	program		/usr/bin/sweep
	retval_virus	3
	switches	"-archive"
	before_name	"Virus '"
	after_name	"' found"
end_av

begin_av
	name		InoculateIT
	program		/usr/local/inocucmd/inocucmd
	retval_virus	100
	switches	"-sec"
	before_name	"infected by virus ["
	after_name	"]"
end_av

# If you run into problems with this one, try the following changes:
#       switches        "-MAIL -UNZIP -SMART -RP /usr/local/rav8/rave"
#       needs_ripmime   yes
begin_av
	name		RAV
	program		/usr/local/rav8/bin/ravav
	retval_virus	2
	switches	"-MAIL -UNZIP -SMART"
	switches_after	yes
	before_name	" Infected:"
	needs_ripmime	no
end_av

begin_av
	name		Kaspersky
	program		/usr/bin/kavscanner
	retval_virus	4
	switches	"-Y"
	before_name	" infected: "
end_av

# F-Secure definition by Jarmo Jarvenpaa <Jarmo.Jarvenpaa@softers.net>.
# He says it works! F-Secure doesn't provide eval copies, so I didn't test
begin_av
	name		F-Secure
	program		/usr/local/fsav/fsav
	retval_virus	3
	switches	"--archive --dumb"
	before_name	":"
	needs_filenames	yes
end_av
