Virus/Worm filtering (2)

Run clamd
/usr/local/sbin/clamd

Exim Configuration
av_scanner = clamd:/tmp/clamd
...
acl_check_content:
  # Reject message containing virus(es).
  deny  message = This message contains malware ($malware_name)
   demime = *
   malware = *

Result (from /var/log/exim/mainlog)
2004-02-09 13:33:08 1AqJ1a-0005vn-0v H=pool-141-150-41-223.mad.east.verizon.net (cnsnews.com) [141.150.41.223] F=<bob@cnsnews.com> rejected after DATA: This message contains malware (Worm.SCO.A)

Alternatives: Sophos, Kapersky - whatever exiscan-acl supports