--- spampd      2006-08-25 10:39:39.000000000 -0700
+++ spampd-scan 2006-08-25 14:48:25.000000000 -0700
@@ -75,6 +75,7 @@
 
 use strict;
 use IO::File;
+use File::Temp qw(mkstemp);
 
 #use IO::Socket;
 
@@ -208,7 +209,8 @@
             $self->{data}->truncate(0);
         }
         else {
-            $self->{data} = IO::File->new_tmpfile;
+             ( undef, $self->{datafilename} ) =  mkstemp("/tmp/spampdXXXXX");
+             $self->{data} = new IO::File $self->{datafilename}, "r+";
         }
         while ( defined( $_ = $self->_getline ) ) {
             if ( $_ eq ".\r\n" ) {
@@ -521,6 +523,30 @@
         }
 
         $msgid ||= "(unknown)";
+        
+         my $infected = 0;
+         my $infections;
+         my $filename = $self->{smtp_server}->{datafilename};
+         $self->log( 2, "%s",
+            "start message virus scanning $msgid and  for " . $recips . "on datafile $filename");
+            open( CLAMAV, "/usr/local/bin/clamscan $filename|" );
+            while (<CLAMAV>) {
+                if (/^\Q$filename\E:\s(.*)$/) {
+                    $infections = $1;
+                }
+                if (/^Infected\sfiles:\s(\d+)/) {
+                    $infected = $1;
+                }
+            }
+            close CLAMAV;
+         #unlink $filename;
+          
+     if ( $infected > 0 ) {
+         $self->log( 2, "%s%s%s",
+            "Virus $infected $infections in message $msgid for " . $recips . " and Quit!!!" );
+          exit 1;
+     } 
+     else {
 
         $self->log( 2, "%s", "processing message $msgid for " . $recips );
 
@@ -635,7 +661,9 @@
             # set the timeout alarm back to wherever it was at
             alarm($previous_alarm);
 
-        };
+        }; #end eval
+    
+    } #end if for virus skip 
 
         if ( $@ ne '' ) {


##</code><code>##

Aug 25 15:52:16 scanner spampd[25091]: start message virus scanning <20060825215158.64D1B2C44FB@mydomain.com> and  for <test@mydomain.com>on datafile /tmp/spampd5Wqhn
 
Aug 25 15:52:23 scanner spampd[25091]: Virus 1 HTML.Phishing.Bank-380 FOUND in message <20060825215158.64D1B2C44FB@mydomain.com> for <test@mydomain.com> and Quit!!! 

Aug 25 15:52:23 scanner spampd[25094]: start message virus scanning <20060825214705.6B0582C44F0@mydomain.com> and  for <test@mydomain.com>on datafile /tmp/spampdUOh2w
 
Aug 25 15:52:29 scanner spampd[25094]: Virus 1 HTML.Phishing.Bank-380 FOUND in message <20060825214705.6B0582C44F0@mydomain.com> for <test@mydomain.com> and Quit!!!