failure of all virus scanners

[Ralf Hildebrandt]

* Ralf Hildebrandt <Ralf.Hildebrandt at charite.de>:

> Looking at the categories I see no way of distinguishing an encrypted
> archive (which should be passed) from a generic "all scanners have
> failed" error (which should cause a tempfail).
> 
> ...
> Jun 15 10:05:08 mail amavis[3999]: (03999-08) p003 1/2 Content-Type: application/x-zip-compressed, size: 12791 B, name: 3618_error_log_20110615.zip
> Jun 15 10:05:08 mail amavis[3999]: (03999-08) do_unzip: p003, 1 members are encrypted, none extracted, archive retained
> Jun 15 10:05:09 mail amavis[3999]: (03999-08) FWD from <SIBE at novonordisk.com> -> <Andreas.Hueser at charite-research.org>,BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10026): 250 2.0.0 Ok: queued as 3QvL455jGWzFvq5
> Jun 15 10:05:09 mail amavis[3999]: (03999-08) Passed UNCHECKED {RelayedInbound}, [217.16.101.214]:40793 [127.0.0.1] <SIBE at novonordisk.com> -> <Andreas.Hueser at charite-research.org>, Message-ID: <7FDA82A7CD7EB24E81BF85C74CAF8E0E4708A59A79 at exdkmbx022.corp.novocorp.net>,mail_id: 60xc9rwqiz5V, Hits: -1.899, size: 26319, queued_as: 3QvL455jGWzFvq5, 905 ms
> ...

Specifically I want to TEMPFAIL on this:

Jun 14 12:34:05 bonescn03 amavis[28924]: (28924-05) Checking: [10.254.182.241] <> -> <recipient at domain.example.com>
Jun 14 12:39:41 bonescn03 amavis[28924]: (28924-05) (!)Avira SAVAPI av-scanner FAILED: run_av error: timed out\n
Jun 14 12:39:41 bonescn03 amavis[28924]: (28924-05) (!)WARN: all primary virus scanners failed, considering backups
Jun 14 12:39:41 bonescn03 amavis[28924]: (28924-05) (!!)AV: ALL VIRUS SCANNERS FAILED


-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebrandt at charite.de | http://www.charite.de