Thanks Damian. I could understand it with the reading. This works:
### http://www.drweb.com/ ['Dr. Web Security Space ', 'drweb-ctl', 'checkmail {}', qr/\bOK$/m, # Clean, skipped qr/\bReject/m, # Not clean qr/infected with (.*)$/m ], # Name of virus On Sun, Feb 20, 2022 at 11:08 AM Damian <[email protected]> wrote: > > ['Dr. Web Security Space ', > > > > 'drweb-ctl', 'checkmail {}', > > > > qr/^Reject/m,, > > > > qr/^(?:infected with:\s+(.+)/m ], > > Have a look at [1]. > > - Both your patterns anchor at beginning of line. > - A clean mail would not match "Reject" anywhere, but you defined it for > the "clean" pattern. > > [1] > https://gitlab.com/amavis/amavis/-/blob/master/lib/Amavis/AV.pm#L960-997 >
