Clamav module problem.. solved (i think)

[Randal, Phil]

But wouldn't ClamAV need this to detect the Phishing stuff it has
patterns for?

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Luca Palazzo
> Sent: 14 February 2005 12:14
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Clamav module problem.. solved (i think)
>
> I think that it is not need. Infact, MS parses HTML (never
> checked for it but it does)
>
> Luca
> PS: I think that this should be included in next release of MS
>
> Randal, Phil ha scritto:
>
> >That looks right to me.
> >
> >In libclamav/clamav.h we have:
> >
> >define CL_SCAN_STDOPT               (CL_SCAN_ARCHIVE | CL_SCAN_MAIL |
> >CL_SCAN_OLE2 | CL_SCAN_HTML | CL_SCAN_PE)
> >
> >Should we also enable CL_SCAN_HTML?
> >
> >Cheers,
> >
> >Phil
> >
> >----
> >Phil Randal
> >Network Engineer
> >Herefordshire Council
> >Hereford, UK
> >
> >
> >
> >>-----Original Message-----
> >>From: MailScanner mailing list
> >>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Luca Palazzo
> >>Sent: 12 February 2005 20:26
> >>To: MAILSCANNER at JISCMAIL.AC.UK
> >>Subject: Clamav module problem.. solved (i think)
> >>
> >>Hi,
> >>I had some problem with MS non finding Bagz.E using clamavmodule.
> >>
> >>I've solved the problem with this patch in SweepVirus.pm
> >>
> >>--- SweepViruses.pm     2005-01-25 22:17:02.000000000 +0100
> >>+++ /opt/MailScanner/lib/MailScanner/SweepViruses.pm    2005-02-12
> >>00:06:38.000000000 +0100
> >>@@ -1002,10 +1002,12 @@
> >>       if (MailScanner::Config::Value('allowpasszips')) { #
> >>|| $haverar) {
> >>         $results = $Clam->scan("$dirname/$childname/$filename",
> >>                                Mail::ClamAV::CL_SCAN_ARCHIVE() |
> >>+                               Mail::ClamAV::CL_SCAN_PE() |
> >>                                Mail::ClamAV::CL_SCAN_OLE2());
> >>       } else {
> >>         $results = $Clam->scan("$dirname/$childname/$filename",
> >>                                Mail::ClamAV::CL_SCAN_ARCHIVE() |
> >>+                               Mail::ClamAV::CL_SCAN_PE() |
> >>
> >>Mail::ClamAV::CL_SCAN_BLOCKENCRYPTED() |
> >>                                Mail::ClamAV::CL_SCAN_OLE2());
> >>
> >>What about it?
> >>
> >>Thanks
> >>
> >>Luca
> >>
> >>--
> >>
> >>Luca Palazzo
> >>System Engineer
> >>
> >>N.C.E.  Network Consulting Engineering s.r.l.
> >>Via Etnea, 52 - 95028 Valverde (CT) - ITALY
> >>Tel/Fax: +39 095 524190
> >>Mobile: +39 340 4608689
> >>web: www.nce-ict.it
> >>mail: luca.palazzo at nce-ict.it
> >>
> >>------------------------ MailScanner list
> >>------------------------ To unsubscribe, email
> jiscmail at jiscmail.ac.uk
> >>with the words:
> >>'leave mailscanner' in the body of the email.
> >>Before posting, read the MAQ
> >>(http://www.mailscanner.biz/maq/) and the archives
> >>(http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >>Support MailScanner development - buy the book off the website!
> >>
> >>
> >>
> >
> >------------------------ MailScanner list
> ------------------------ To
> >unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the
> >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >
> >
> >
>
>
> --
>
> Luca Palazzo
> System Engineer
>
> N.C.E.  Network Consulting Engineering s.r.l.
> Via Etnea, 52 - 95028 Valverde (CT) - ITALY
> Tel/Fax: +39 095 524190
> Mobile: +39 340 4608689
> web: www.nce-ict.it
> mail: luca.palazzo at nce-ict.it
>
> ------------------------ MailScanner list
> ------------------------ To unsubscribe, email
> jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!