Clamav module problem.. solved (i think)

[Randal, Phil]

That looks right to me.

In libclamav/clamav.h we have:

define CL_SCAN_STDOPT               (CL_SCAN_ARCHIVE | CL_SCAN_MAIL |
CL_SCAN_OLE2 | CL_SCAN_HTML | CL_SCAN_PE)

Should we also enable CL_SCAN_HTML?

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Luca Palazzo
> Sent: 12 February 2005 20:26
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Clamav module problem.. solved (i think)
>
> Hi,
> I had some problem with MS non finding Bagz.E using clamavmodule.
>
> I've solved the problem with this patch in SweepVirus.pm
>
> --- SweepViruses.pm     2005-01-25 22:17:02.000000000 +0100
> +++ /opt/MailScanner/lib/MailScanner/SweepViruses.pm    2005-02-12
> 00:06:38.000000000 +0100
> @@ -1002,10 +1002,12 @@
>        if (MailScanner::Config::Value('allowpasszips')) { #
> || $haverar) {
>          $results = $Clam->scan("$dirname/$childname/$filename",
>                                 Mail::ClamAV::CL_SCAN_ARCHIVE() |
> +                               Mail::ClamAV::CL_SCAN_PE() |
>                                 Mail::ClamAV::CL_SCAN_OLE2());
>        } else {
>          $results = $Clam->scan("$dirname/$childname/$filename",
>                                 Mail::ClamAV::CL_SCAN_ARCHIVE() |
> +                               Mail::ClamAV::CL_SCAN_PE() |
>
> Mail::ClamAV::CL_SCAN_BLOCKENCRYPTED() |
>                                 Mail::ClamAV::CL_SCAN_OLE2());
>
> What about it?
>
> Thanks
>
> Luca
>
> --
>
> Luca Palazzo
> System Engineer
>
> N.C.E.  Network Consulting Engineering s.r.l.
> Via Etnea, 52 - 95028 Valverde (CT) - ITALY
> Tel/Fax: +39 095 524190
> Mobile: +39 340 4608689
> web: www.nce-ict.it
> mail: luca.palazzo at nce-ict.it
>
> ------------------------ MailScanner list
> ------------------------ To unsubscribe, email
> jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!