ClamAV 0.93 released

Leonardo Helman mailscanner at lists.com.ar
Thu Apr 17 21:41:00 IST 2008


Hi I'm using clamavmodule


I've made a patch for the Mail::ClamAV to compile (later I'll send it
to the Mail::ClamAV mantainer)

Basicaly I've deleted every option that doesn't exists any more.
Adding new ones is a trivial task.



There is a couple of changes to do in MS, clamav max ratio 
or something like that, doesn't exists any more
and CL_SCAN_PHISHING_DOMAINLIST has dissapeared

later I'll send a patch for SweepViruses.pm

That's the good news

But we have to decide if we want some of the new limits
for example: 
do we want to define maxscansize? and archivememlim?

should I add them to the patched Mail::ClamAV module?
should we add them to the MS?

comments?

Here is a patch that eliminating the broken options from Mail::ClamAV


diff -Naur Mail-ClamAV-0.21.ORIG/ClamAV.pm Mail-ClamAV-0.21/ClamAV.pm
--- Mail-ClamAV-0.21.ORIG/ClamAV.pm	2008-01-14 19:32:27.000000000 -0200
+++ Mail-ClamAV-0.21/ClamAV.pm	2008-04-17 16:27:30.000000000 -0300
@@ -88,7 +88,6 @@
     CL_SCAN_MAILURL
     CL_SCAN_BLOCKMAX
     CL_SCAN_ALGORITHMIC
-    CL_SCAN_PHISHING_DOMAINLIST
     CL_SCAN_PHISHING_BLOCKSSL
 
     CL_SCAN_PHISHING_BLOCKCLOAK
@@ -224,12 +223,10 @@
 
     /* set defaults for limits */
     c->limits.maxreclevel = 5;
-    c->limits.maxmailrec = 10;
     c->limits.maxfiles = 1000;
     c->limits.maxfilesize = 1024 * 1028 * 10; /* 10 Megs */
 
     /* XXX need to figure out a nice default */
-    c->limits.maxratio = 200;
     c->limits.archivememlim = 1;
 
     if (S_ISDIR(st.st_mode)) {
@@ -304,19 +301,6 @@
     return SvClam(self)->limits.maxreclevel;
 }
 
-int clamav_perl_maxmailrec(SV *self, ...)
-{
-    Inline_Stack_Vars;
-    if (Inline_Stack_Items > 1) {
-        SV *max;
-        if (Inline_Stack_Items > 2)
-            croak("Invalid number of arguments to maxmailrec()");
-        max = Inline_Stack_Item(1);
-        SvClam(self)->limits.maxmailrec = SvIV(max);
-    }
-    return SvClam(self)->limits.maxmailrec;
-}
-
 int clamav_perl_maxfiles(SV *self, ...)
 {
     Inline_Stack_Vars;
@@ -343,19 +327,6 @@
     return SvClam(self)->limits.maxfilesize;
 }
 
-int clamav_perl_maxratio(SV *self, ...)
-{
-    Inline_Stack_Vars;
-    if (Inline_Stack_Items > 1) {
-        SV *max;
-        if (Inline_Stack_Items > 2)
-            croak("Invalid number of arguments to maxratio()");
-        max = Inline_Stack_Item(1);
-        SvClam(self)->limits.maxratio = (long int)SvIV(max);
-    }
-    return SvClam(self)->limits.maxratio;
-}
-
 int clamav_perl_archivememlim(SV *self, ...)
 {
     Inline_Stack_Vars;
@@ -536,7 +507,6 @@
     if (strEQ("CL_SCAN_MAILURL", name)) return CL_SCAN_MAILURL;
     if (strEQ("CL_SCAN_BLOCKMAX", name)) return CL_SCAN_BLOCKMAX;
     if (strEQ("CL_SCAN_ALGORITHMIC", name)) return CL_SCAN_ALGORITHMIC;
-    if (strEQ("CL_SCAN_PHISHING_DOMAINLIST", name)) return
CL_SCAN_PHISHING_DOMAINLIST;
     if (strEQ("CL_SCAN_PHISHING_BLOCKSSL", name)) return
CL_SCAN_PHISHING_BLOCKSSL;
     if (strEQ("CL_SCAN_PHISHING_BLOCKCLOAK", name)) return
CL_SCAN_PHISHING_BLOCKCLOAK;
     if (strEQ("CL_SCAN_ELF", name)) return CL_SCAN_ELF;
@@ -616,11 +586,9 @@
 
     # Set some limits (only applies to scan())
     $c->maxreclevel(4);
-    $c->maxmailrec(4);
     $c->maxfiles(20);
     $c->maxfilesize(1024 * 1024 * 20); # 20 megs
     $c->archivememlim(0); # limit memory usage for bzip2 (0/1)
-    $c->maxratio(0);
 
     # Scan a filehandle (scandesc in clamav)
     # scan(FileHandle or path, Bitfield of options)
@@ -715,10 +683,6 @@
 
 Enable algorithmic detection of viruses. 
 
-=item CL_SCAN_PHISHING_DOMAINLIST
-
-Phishing module: restrict URL scanning to domains from .pdf
(RECOMMENDED). 
-
 =item CL_SCAN_PHISHING_BLOCKSSL
 
 Phishing module: always block SSL mismatches in URLs. 
@@ -904,10 +868,6 @@
 
 Sets the maximum recursion level into archives [default 5].
 
-=item maxmailrec
-
-Sets the maximum recursion level into emails [default 10].
-
 =item maxfiles
 
 Maximum number of files that will be scanned [default 1000]. A value of
zero
@@ -918,12 +878,6 @@
 Maximum file size that will be scanned in bytes [default 10M]. A value
of zero
 disables the check.
 
-=item maxratio
-
-Maximum compression ratio. So if this is set to 200, libclamav will
give up
-decompressing a file if it reaches 200x its compressed size [default
200]. A
-value of zero disables the check.
-
 =item archivememlim
 
 Turns on/off memory usage limits for bzip2. [default 1]
diff -Naur Mail-ClamAV-0.21.ORIG/Makefile.PL
Mail-ClamAV-0.21/Makefile.PL
--- Mail-ClamAV-0.21.ORIG/Makefile.PL	2007-02-20 10:45:30.000000000
-0300
+++ Mail-ClamAV-0.21/Makefile.PL	2008-04-17 16:32:25.000000000 -0300
@@ -13,8 +13,8 @@
 }
 my $version = `clamav-config --version`;
 chomp $version;
-if ($version < 0.90) {
-    die "The clamav version you are using is too old. Please upgrade to
atleast 0.90\n";
+if ($version < 0.93) {
+    die "The clamav version you are using is too old. Please upgrade to
atleast 0.93\n";
 }
 
 my $libs = `clamav-config --libs`;
diff -Naur Mail-ClamAV-0.21.ORIG/t/Mail-ClamAV.t
Mail-ClamAV-0.21/t/Mail-ClamAV.t
--- Mail-ClamAV-0.21.ORIG/t/Mail-ClamAV.t	2007-02-20 10:35:41.000000000
-0300
+++ Mail-ClamAV-0.21/t/Mail-ClamAV.t	2008-04-17 16:28:49.000000000 -0300
@@ -59,7 +59,6 @@
     CL_SCAN_MAILURL
     CL_SCAN_BLOCKMAX
     CL_SCAN_ALGORITHMIC
-    CL_SCAN_PHISHING_DOMAINLIST
     CL_SCAN_PHISHING_BLOCKSSL
 
     CL_SCAN_PHISHING_BLOCKCLOAK
-----------------------------------------------------------------------


Saludos
Leonardo Helman
Pert Consultores
Argentina



On Tue, 2008-04-15 at 21:29 +0100, Julian Field wrote:
> Brad,
> 
> Brad Dokken wrote:
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info 
> >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> >> Of Julian Field
> >> Sent: Monday, April 14, 2008 10:56 AM
> >> To: MailScanner discussion
> >> Subject: Re: ClamAV 0.93 released
> >>
> >> I have upgraded the ClamAV+SpamAssassin distribution available at 
> >> www.mailscanner.info.
> >>
> >> Note that this new version does *NOT* work with the 
> >> 'clamavmodule' virus 
> >> scanner. So don't upgrade if you're running the clamavmodule scanner.
> >>
> >>     
> >
> > Could you provide some clarification for me? Back in the day MailScanner
> > didn't support Clamd.
> Ah, the good ole days :-)
> >  When Clamd support became available I stuck with
> > clamavmodule because the speed increase wasn't needed in my
> > configuration. Your easy install package is so simple and "just works"
> > so I haven't seen a need to change anything. Over the past year it seems
> > the Mail::ClamAV perl module hasn't been getting updated in a timely
> > manner.
> Agreed.
> >  I have waited for it to get updated and then installed the
> > latest ClamAV update. This is getting a bit old and so I ask, is ClamD
> > considered the Best Practice for a MailScanner setup today?
> Not sure on that, I still use clamavmodule as you don't *have* to update 
> to the latest ClamAV the day it is released. The previous version will 
> carry on working just fine for quite a while. One of these days I might 
> jump ship to clamd, but not yet.
> >  Also, once I
> > install and configure ClamD from DW's rpms, does your easy install
> > package update ClamAV from that point on or do I have to skip the clamav
> > update when I run the install script from your easy install package?
> >   
> My ClamAV+SpamAssassin package will ask you if you want it to install 
> ClamAV or not. If you choose not, then it will ask you where your 
> current clamscan is installed so that it can work out what directories 
> to set and where. So you don't have to edit my install script or 
> anything nasty like that, it handles it all in a relatively intelligent 
> manner (I hope that's what people see, anyway!).
> 
> Jules
> 
> -- 
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> PGP public key: http://www.jules.fm/julesfm.asc
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Mail-ClamAV-0.21.patch
Type: text/x-patch
Size: 4659 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080417/4996c5af/Mail-ClamAV-0.21.bin


More information about the MailScanner mailing list