<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Sigh … its 2015 not 1993.<div class=""><br class=""></div><div class=""><a href="https://s3.amazonaws.com/mailborder/releases/stable/4.1.0/unrar-4.2.3-1.el6.rf.i686.rpm" class="">https://s3.amazonaws.com/mailborder/releases/stable/4.1.0/unrar-4.2.3-1.el6.rf.i686.rpm</a></div><div class=""><br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com" class="">www.mailborder.com</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Apr 15, 2015, at 4:19 AM, Volker Dose <<a href="mailto:vpdose@kirchenweg.de" class="">vpdose@kirchenweg.de</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class=""><div class="">Hi,</div><div class=""><br class=""></div><div class="">Thanks a lot for the link, But I am using a 32bit architektur, do you have a rpm for that also?</div><div class=""><br class=""></div><div class="">Best regards,</div><div class=""><br class=""></div><div class="">Volker<br class=""><br class="">Volker Dose</div><div class=""><br class="">Am 15.04.2015 um 09:42 schrieb Jerry Benton <<a href="mailto:jerry.benton@mailborder.com" class="">jerry.benton@mailborder.com</a>>:<br class=""><br class=""></div><blockquote type="cite" class=""><div class=""><meta http-equiv="Content-Type" content="text/html charset=us-ascii" class=""><a href="https://s3.amazonaws.com/mailborder/releases/stable/4.1.0/unrar-4.2.3-1.el6.rf.x86_64.rpm" class="">https://s3.amazonaws.com/mailborder/releases/stable/4.1.0/unrar-4.2.3-1.el6.rf.x86_64.rpm</a><div class=""><br class=""><div apple-content-edited="true" class="">
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com/" class="">www.mailborder.com</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div style="" class=""><blockquote type="cite" class=""><div class="">On Apr 15, 2015, at 3:37 AM, Volker Dose <<a href="mailto:vpdose@kirchenweg.de" class="">vpdose@kirchenweg.de</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Hi,</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">I am using CentOS and afaik there is no rar-Support compiled in - at least no sign of "libclamavunrar":</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">[root@mailscanner ~]# ldd /usr/bin/clamscan<span class="Apple-converted-space"> </span><br class=""> linux-gate.so.1 => (0x00748000)<span class="Apple-converted-space"> </span><br class=""> libclamav.so.6 => /usr/lib/libclamav.so.6 (0x008ef000)<span class="Apple-converted-space"> </span><br class=""> libxml2.so.2 => /usr/lib/libxml2.so.2 (0x001bf000)<span class="Apple-converted-space"> </span><br class=""> libz.so.1 => /lib/libz.so.1 (0x00f46000)<span class="Apple-converted-space"> </span><br class=""> libbz2.so.1 => /lib/libbz2.so.1 (0x00515000)<span class="Apple-converted-space"> </span><br class=""> libssl.so.10 => /usr/lib/libssl.so.10 (0x00659000)<span class="Apple-converted-space"> </span><br class=""> libcrypto.so.10 => /usr/lib/libcrypto.so.10 (0x0030a000)<span class="Apple-converted-space"> </span><br class=""> libm.so.6 => /lib/libm.so.6 (0x004d2000)<span class="Apple-converted-space"> </span><br class=""> libdl.so.2 => /lib/libdl.so.2 (0x00fce000)<span class="Apple-converted-space"> </span><br class=""> libpthread.so.0 => /lib/libpthread.so.0 (0x00526000)<span class="Apple-converted-space"> </span><br class=""> libc.so.6 => /lib/libc.so.6 (0x00749000)<span class="Apple-converted-space"> </span><br class=""> libgssapi_krb5.so.2 => /lib/libgssapi_krb5.so.2 (0x00541000)<span class="Apple-converted-space"> </span><br class=""> libkrb5.so.3 => /lib/libkrb5.so.3 (0x00af2000)<span class="Apple-converted-space"> </span><br class=""> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004fc000)<span class="Apple-converted-space"> </span><br class=""> libk5crypto.so.3 => /lib/libk5crypto.so.3 (0x00581000)<span class="Apple-converted-space"> </span><br class=""> libresolv.so.2 => /lib/libresolv.so.2 (0x005ac000)<span class="Apple-converted-space"> </span><br class=""> /lib/ld-linux.so.2 (0x00e11000)<span class="Apple-converted-space"> </span><br class=""> libkrb5support.so.0 => /lib/libkrb5support.so.0 (0x00501000)<span class="Apple-converted-space"> </span><br class=""> libkeyutils.so.1 => /lib/libkeyutils.so.1 (0x0050d000)<span class="Apple-converted-space"> </span><br class=""> libselinux.so.1 => /lib/libselinux.so.1 (0x00bfc000)</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">When I check a zip-archiv it shows this:</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><p class="">[root@mailscanner ~]# clamscan putty.zip</p><p class="">putty.zip: Sanesecurity.Foxhole.Zip_exe.UNOFFICIAL FOUND</p><p class="">----------- SCAN SUMMARY -----------<br class="">Known viruses: 4478278<br class="">Engine version: 0.98.6<br class="">Scanned directories: 0<br class="">Scanned files: 1<br class="">Infected files: 1<br class="">Data scanned: 0.00 MB<br class="">Data read: 0.25 MB (ratio 0.00:1)<br class="">Time: 16.959 sec (0 m 16 s)</p><div class=""> <br class="webkit-block-placeholder"></div><div class=""> <br class="webkit-block-placeholder"></div><p class="">[root@mailscanner ~]# clamscan putty.rar</p><p class="">putty.rar: OK</p><p class="">----------- SCAN SUMMARY -----------</p><p class="">Known viruses: 4478278<span class="Apple-converted-space"> </span><br class="">Engine version: 0.98.6<span class="Apple-converted-space"> </span><br class="">Scanned directories: 0<span class="Apple-converted-space"> </span><br class="">Scanned files: 1<span class="Apple-converted-space"> </span><br class="">Infected files: 0<span class="Apple-converted-space"> </span><br class="">Data scanned: 0.22 MB<span class="Apple-converted-space"> </span><br class="">Data read: 0.22 MB (ratio 1.00:1)<span class="Apple-converted-space"> </span><br class="">Time: 17.652 sec (0 m 17 s)</p></div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">But this is maybe just a side-problem, I was hoping to get the filetype recognition working in MS.</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Here my Settings regarding rar/unrar in MailScanner.conf:</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Unrar Command = /usr/bin/unrar<span class="Apple-converted-space"> </span><br class="">Unrar Timeout = 50</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Best regards</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Volker</div><div style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="">> Rick Cooper <<a href="mailto:rcooper@dwford.com" class="">rcooper@dwford.com</a>> hat am 15. April 2015 um 02:03 geschrieben:<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> Volker Dose wrote:<span class="Apple-converted-space"> </span><br class="">> > Hi,<span class="Apple-converted-space"> </span><br class="">> ><span class="Apple-converted-space"> </span><br class="">> > I have already configured the foxhole-stuff and it works brilliantly<span class="Apple-converted-space"> </span><br class="">> > on zip-files. But no effect on executables in rar-archives.<span class="Apple-converted-space"> </span><br class="">> ><span class="Apple-converted-space"> </span><br class="">> > I was reading, that clam has no support for opening and scanning<span class="Apple-converted-space"> </span><br class="">> > rar-archives because of license issues. I have the actual clamav<span class="Apple-converted-space"> </span><br class="">> > installed and even tried to compile from scratch, but no success<span class="Apple-converted-space"> </span><br class="">> > -rar-files are not scanned.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> ClamAv has had RAR capabilities since verion 0.90.<span class="Apple-converted-space"> </span><br class="">> Now, from what I remember Fedora does not include libunrar (even though it's<span class="Apple-converted-space"> </span><br class="">> free) and I think there version of the rpm uses the --disable-unrar switch<span class="Apple-converted-space"> </span><br class="">> as well. Don't remember if you are using fedora or not.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> Also you have to have unrar installed for MailScanner to unpack it.<span class="Apple-converted-space"> </span><br class="">> Look in the MailScanner.conf for<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> MailScanner.conf:Unrar Command = /usr/bin/unrar<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> And point it to your unrar binary<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> --<span class="Apple-converted-space"> </span><br class="">> MailScanner mailing list<span class="Apple-converted-space"> </span><br class="">> <a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><span class="Apple-converted-space"> </span><br class="">> <a href="http://lists.mailscanner.info/listinfo/mailscanner" class="">http://lists.mailscanner.info/listinfo/mailscanner</a><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span></div><br style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">MailScanner mailing list</span><br style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:mailscanner@lists.mailscanner.info" style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">mailscanner@lists.mailscanner.info</a><br style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://lists.mailscanner.info/listinfo/mailscanner" style="font-family: Tahoma; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://lists.mailscanner.info/listinfo/mailscanner</a></div></blockquote></div><br class=""></div></div></blockquote><blockquote type="cite" class=""><div class=""><span class=""></span><br class=""><span class=""></span><br class=""><span class="">-- </span><br class=""><span class="">MailScanner mailing list</span><br class=""><span class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a></span><br class=""><span class=""><a href="http://lists.mailscanner.info/listinfo/mailscanner" class="">http://lists.mailscanner.info/listinfo/mailscanner</a></span><br class=""><span class=""></span><br class=""></div></blockquote></div><br class=""><br class="">-- <br class="">MailScanner mailing list<br class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">http://lists.mailscanner.info/listinfo/mailscanner<br class=""><br class=""></div></blockquote></div><br class=""></div></body></html>