warn set acl_m_dlfunc_answer = set acl_m_kav4lms_tempfile = condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} set acl_m_dlfunc_answer = ${dlfunc{confDLFUNC_PATH/confDLFUNC_FNAME}{kav4lms}\ {_AV_SCAN}{defer_ok}_AV_DLFUNC_PARAM} warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if eq{$acl_m_dlfunc_answer}{}{yes}{no}} logwrite = kav4lms dlfunc check failed: empty answer set acl_m_dlfunc_answer = set acl_m_av_result = defer warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if match{$acl_m_dlfunc_answer}{\N^kav4lms dlfunc:\s*\N}{yes}{no}} logwrite = kav4lms dlfunc check defer: ${sg{$acl_m_dlfunc_answer}{\N^kav4lms dlfunc:\s*\N}{}} set acl_m_dlfunc_answer = set acl_m_av_result = defer warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} set acl_m_dlfunc_headers = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: .+?\n((.*\n)+)$\N}{$1}{}} condition = ${if eq{$acl_m_dlfunc_headers}{}{no}{yes}} set acl_m_kav4lms_tempfile = ${if match{$acl_m_dlfunc_headers}{\N^temporary file ([^\n\r]+)\r?\n\N}{$1}{}} set acl_m_dlfunc_headers = ${if match{$acl_m_dlfunc_headers}{\N^temporary file ([^\n\r]+)\r?\n((.*\n)*)$\N}{$2}{$acl_m_dlfunc_headers}} set acl_m_dlfunc_headers = ${sg{$acl_m_dlfunc_headers}{\r\n}{\n}} # logwrite = headers added by kav4lms dlfunc: $acl_m_dlfunc_headers add_header = $acl_m_dlfunc_headers set acl_m_kav4lms_result = ${if match{$acl_m_dlfunc_headers}{\N^(.*\n)*X-Anti-Virus: (.*\n\s)*.* check: 2\d{7} (\S+)\n\N}{$3}{}} warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: DEFER\N}{yes}{no}} set acl_m0 = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: DEFER:?\s?(.+)$\N}{$1}{}} logwrite = KAV4LMS check defer: $acl_m0\ ${if eq{$acl_m_kav4lms_result}{}{}{${if eq{$acl_m0}{}{}{, }}result is '$acl_m_kav4lms_result'}} \ (temporary file $acl_m_kav4lms_tempfile) set acl_m_dlfunc_answer = set acl_m_av_result = defer warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: (REJECT|DROP)\N}{yes}{no}} set acl_m0 = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: (REJECT|DROP):?\s?(.+)$\N}{$2}{}} logwrite = KAV4LMS check reject: $acl_m0\ ${if eq{$acl_m_kav4lms_result}{}{}{${if eq{$acl_m0}{}{}{, }}result is '$acl_m_kav4lms_result'}} \ (temporary file $acl_m_kav4lms_tempfile) set acl_m_dlfunc_answer = set acl_m_av_result = infected set acl_m_malware_name = $malware_name warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: ACCEPT\N}{yes}{no}} set acl_m0 = ${if match{$acl_m_dlfunc_answer}{\N^KAV4LMS answer: ACCEPT:?\s?(.+)$\N}{$1}{}} logwrite = KAV4LMS check accept: $acl_m0\ ${if eq{$acl_m_kav4lms_result}{}{}{${if eq{$acl_m0}{}{}{, }}result is '$acl_m_kav4lms_result'}} set acl_m_dlfunc_answer = set acl_m_av_result = clean warn condition = ${if eq{$acl_m_av_result}{skip}{no}{yes}} condition = ${if eq{$acl_m_dlfunc_answer}{}{no}{yes}} logwrite = kav4lms dlfunc check: unknown answer: $acl_m_dlfunc_answer set acl_m_av_result = clean