clamscan - oversized zip, workaround?
Darren Fulton - Concept Technology
darren at CONCEPTTECHNOLOGYINC.COM
Tue Jan 13 00:48:28 GMT 2004
Recently I've run into a problem with ClamAV that causes it to
quarantine attached zip files if the compression ratio is too high.
Specifically, a ~30 MB tif file compressed using zip to ~1 1/2 MB. The
message attached reads, "...
At Mon Jan 12 18:05:43 2004 the virus scanner said:
ClamAV: ad_tif.zip contains Oversized Zip "
This is a known issue with ClamAV and I was wondering if anyone had a good workaround. If not a good work around, how can I disable scanning the contents of zip files. I modified /usr/lib/MailScanner/clamav-wrapper as below and restarted MailScanner but that didn't seem to do the trick.
ScanOptions=""
# ScanOptions modified by darren to prevent Oversized Zip problem
#ScanOptions="$ScanOptions --unzip" # unzip archives too
# Extra options we try to pass to clam but we handle it failing
#ExtraScanOptions="--unzip --unarj --unrar --tar --tgz --lha"
ExtraScanOptions="--unarj --unrar --tar --tgz --lha"
More info about the Oversized Zip issue is here: http://www.mail-archive.com/clamav-users@lists.sourceforge.net/msg03258.html
Thanks for the help.
Darren
More information about the MailScanner
mailing list