Small problem after ClamAV upgrade

Plant, Dean dean.plant at roke.co.uk
Thu Mar 8 10:10:38 CET 2007


Denis Beauchemin wrote:
> 
> Look into /usr/lib/MailScanner/MailScanner/SweepViruses.pm for
> Mail::ClamAV::CL_SCAN_BLOCKBROKEN() and comment it out (it's there
> twice).  I don't think this can be configured by other means.  Then
> restart MS.
> 
> Denis

After looking in SweepViruses.pm I thought I better read up on the
options in Mail-ClamAV-0.20

>From http://search.cpan.org/src/SABECK/Mail-ClamAV-0.20/README there are
a few new options that are not in Mail-ClamAV-0.17 so it would seem that
unless we add these options to
/usr/lib/MailScanner/MailScanner/SweepViruses.pm we are not enabling the
new features of ClamAV 0.90.1. Is this correct? If so what are the lists
thoughts on which options should be added? I think all of these options
are enabled by default if using ClamAV via the command line scanner with
MailScanner.

New options in Mail-ClamAV-0.20 not listed in SweepViruses.pm:

    CL_SCAN_ELF
     Enable support for ELF files.

    CL_SCAN_ALGORITHMIC
     Enable algorithmic detection of viruses.

    CL_SCAN_PHISHING_DOMAINLIST
     Phishing module: restrict URL scanning to domains from .pdf
     (RECOMMENDED).

    CL_SCAN_PHISHING_BLOCKSSL
     Phishing module: always block SSL mismatches in URLs.

    CL_SCAN_PHISHING_BLOCKCLOAK
     Phishing module: always block cloaked URLs.

Dean



More information about the MailScanner mailing list