bitdefender {
  # If set force this action if any virus is found (default unset: no action is forced)
  # SYNO_ANTIVIRUS_MULTIPLE_ACTION {{{
  # Multiple action type based on scan result
  action {
    spam = "synology_spam";
    virus = "synology_antivirus";
    skip = "no_action";
  }
  # }}}

  # message = '${SCANNER}: virus found: "${VIRUS}"';

  # Scan mime_parts separately - otherwise the complete mail will be transferred to AV Scanner
  # Use BitDefender's unpack function
  scan_mime_parts = false;
  # Scanning Text is suitable for some av scanner databases (e.g. Sanesecurity)
  scan_text_mime = false;
  scan_image_mime = false;
  # Scan all attachment
  scan_all_mime_parts = false;

  # If `max_size` is set, messages > n bytes in size are not scanned
  max_size = 20000000;

  # symbol to add (add it to metric if you want non-zero weight)
  # SYNO_ANTIVIRUS_MULTIPLE_ACTION {{{
  # Multiple action type based on scan result
  symbol {
    spam = "BITDEFENDER_SPAM";
    virus = "BITDEFENDER_VIRUS";
    skip = "BITDEFENDER_SKIP";
  }
  # }}}

  # type of symbol: "prefilter", "postfilter", or "normal"
  symbol_type = "prefilter";
  # type of scanner: "clamav", "fprot", "sophos" or "savapi"
  type = "bitdefender";

  # For "savapi" you must also specify the following variable
  #product_id = 12345;
  # You can enable logging for clean messages
  #log_clean = true;
  # String prefixed to keys in Redis 
  prefix = "rspamd/antivirus/bitdefender/";
  # servers to query (if port is unspecified, scanner-specific default is used)
  # can be specified multiple times to pool servers
  # can be set to a path to a unix socket
  # servers = "127.0.0.1:1344";
  .include(try=true,priority=1,duplicate=merge) "$LOCAL_CONFDIR/local.d/antivirus_servers.conf"

  # if `patterns` is specified virus name will be matched against provided regexes and the related
  # symbol will be yielded if a match is found. If no match is found, default symbol is yielded.
  patterns {
    # symbol_name = "pattern";
    # JUST_EICAR = "^EICAR-Test-File";
  }
  patterns_fail {
    # symbol_name = "pattern";
    #CLAM_PROTOCOL_ERROR = '^unhandled response';
  }

  # `skip_antivirus_whitelist` can skip antivirus whitelist check
  skip_antivirus_whitelist = true;
  # `whitelist` points to a map of IP addresses. Mail from these addresses is not scanned.
  whitelist = "/var/packages/MailPlus-Server/target/etc/rspamd/antivirus.wl";

  # tmp file folder
  # tmpdir = "/var/services/tmp/mailplus_server/rspamd";
  .include(try=true,priority=1,duplicate=merge) "$LOCAL_CONFDIR/local.d/antivirus_tmpdir.conf"
}