Clam testing

[Neil Wilson]

After reading a few of the posts on the list this morning, I decided to try and send a few 
tests through my clamav, clamd and clamavmodule system, and neither of them pick up a few of 
the tests listed at http://www.declude.com/Articles.asp?ID=99

Of course I had to allow MailScanner to accept executable files first, but once I'd done 
this, I received quite a few of the eicar.com files in my mailbox that the site mentions as 
critical to block.

For example:

eicarspacegap "Tests for detection of the 'Space Gap' vulnerability (all mailserver AV 
programs need to catch this)."

All of them pick up the "eicarplain" one though.

Does everyone get the same behaviour, or should clam be blocking these?

My clamscan reports the following version details.

ClamAV 0.90.3/3406/Tue Jun 12 10:22:44 2007

Thanks.

Neil



Powered by Linux, driven by passion!

-- 
This email and all contents are subject to the following disclaimer:
http://www.dcdata.co.za/emaildisclaimer.html