drweb-lookup: Lookup Validation

The drweb-lookup utility allows validation of Lookup search results specified in the Dr.Web MailD settings.

The utility is launched with the following command:

drweb-lookup [parameters] <query>

where <query>different types of Lookup used for the search and [parameters] – command line parameters.

The following command line parameters are available:

Short case

Extended case

Arguments

-h

--help

 

Description: Output short help information on the command line parameters to the console and exit

 

-v

--version

 

Description: Output information on the utility version and exit

 

-l

--level

<verbosity level>

Description: Set the logging verbosity level. The following levels are available: Quiet, Error, Alert, Info, Debug

 

-i

--ipc-level

<verbosity level>

Description: Set the verbosity level for IPC records (interaction with drweb-maild). The following levels are available: Quiet, Error, Alert, Info, Debug.

 

 

--syslogfacility

<syslog flag>

Description: Set the subsystem type, used by syslog service for message output (if this service is used for logging, see the next parameter description). The following types are available: Daemon, Mail, Local0, ..., Local7.

 

 

--log-filename

<file name>

Description: Set the name of the log file or syslog (if the syslog service is to be used for logging).

 

-a

--agent

<file path>

Description: Set the path to the Dr.Web Agent socket to receive configuration (by default, if the parameter is not specified, the %var_dir%/ipc/.agent path is used). If the switch is specified without a path, configuration from Dr.Web Agent is not requested.

 

-t

--timeout

<time period>

Description: Set the maximum allowed time to wait for response from Dr.Web Agent when requesting configuration.

 

-q

--query

<searched string>

Description: String that is a search object. If the "-" is specified, the utility reads a search value from the standard input.

 

-e

--exist

 

Description: Specify that only check for the searched object in the Lookup is required, without getting the value (the output can be one of the following: FOUND or NOT FOUND depending on the query result).

Examples:

drweb-lookup -q q -e e,w
q NOT FOUND

 

drweb-lookup -q q -e q,q
FOUND q

 

drweb-lookup -q test@drweb.com -e 'ldap:///?displayName?sub?(mail=$s)'
FOUND test@drweb.com

 

drweb-lookup -q test@drweb.com 'ldap:///?displayName?sub?(mail=$s)' notify.virus=block, notify.virus=allow(rcpt), drweb/ProcessingErrors = pass

 

drweb-lookup -q test@drweb.com "odbc:select rules from maild where a='\$s'" scan = all:-drweb