I would start by just having a basic script in place that prints/outputs/logs the command line parameters. (print/echo $1...). then you see what is passed to the script.<div><br></div><div>Stefan<br><br>Am Freitag, 19. Juni 2020 schrieb  <<a href="mailto:Benjamin.Greve@gmx.net">Benjamin.Greve@gmx.net</a>>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:Verdana;font-size:12.0px"><div>
<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Hi,</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">could someone please explaint to me or point me to the documentation of the syntax in the  amavis 15-av_scanners?</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">What I´m trying is to make use of the c-icap-client. So I would like to pass the email via the ICAP Client to an external ICAP Server for scanning.</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">My ICAP Example</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">#  ['MY AV ICAP Server',<br>
#  '/usr/bin/c-icap-client','-s response -i 192.168.17.215 -f {}',<br>
#  [0], [2],<br>
#  qr/^Infected: (.+)/m,<br>
#  ],</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> <span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">It´s not working this way. Although when I execute the c-icap-client manually it works fine:</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">c-icap-client -s response -i 192.168.1.1 -f sample.pdf</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">So what I do not understand is:</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Line 1: that´s just a name , OK.</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Line 2: includes the path to the binary and parameters I want to pass, but what is {} ??? Is this where the file will be passed to the external application?</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Line 3: What is [0], [2] doing? Should I change it? to what?</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Line 4: And what should I put into the line with "infected" Is this the parsing for the output of the icap result?</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"> </span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">I would also like to write my own script or binary, that will get emails from amavis to be scanned.</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">But I do not know, how the syntax in 15-av_scanners should be, so that my script or binary will be executed in the right way.</span></span></span></span></p>

<p> </p>

<p> </p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif">Best regards,</span></span></span></span></p>

<p><span style="font-size:12pt"><span style="font-family:"Times New Roman",serif"><span style="font-size:9.0pt"><span style="font-family:"Verdana",sans-serif"> Benjamin</span></span></span></span></p>
</div></div></div>
</blockquote></div>