<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<style type="text/css">body {min-height: 100px}
</style>
</head><body style="">
<div>
Hi,
</div>
<div>
</div>
<div>
I am using CentOS and afaik there is no rar-Support compiled in - at least no sign of "libclamavunrar":
</div>
<div>
</div>
<div>
</div>
<div>
[root@mailscanner ~]# ldd /usr/bin/clamscan
<br /> linux-gate.so.1 => (0x00748000)
<br /> libclamav.so.6 => /usr/lib/libclamav.so.6 (0x008ef000)
<br /> libxml2.so.2 => /usr/lib/libxml2.so.2 (0x001bf000)
<br /> libz.so.1 => /lib/libz.so.1 (0x00f46000)
<br /> libbz2.so.1 => /lib/libbz2.so.1 (0x00515000)
<br /> libssl.so.10 => /usr/lib/libssl.so.10 (0x00659000)
<br /> libcrypto.so.10 => /usr/lib/libcrypto.so.10 (0x0030a000)
<br /> libm.so.6 => /lib/libm.so.6 (0x004d2000)
<br /> libdl.so.2 => /lib/libdl.so.2 (0x00fce000)
<br /> libpthread.so.0 => /lib/libpthread.so.0 (0x00526000)
<br /> libc.so.6 => /lib/libc.so.6 (0x00749000)
<br /> libgssapi_krb5.so.2 => /lib/libgssapi_krb5.so.2 (0x00541000)
<br /> libkrb5.so.3 => /lib/libkrb5.so.3 (0x00af2000)
<br /> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004fc000)
<br /> libk5crypto.so.3 => /lib/libk5crypto.so.3 (0x00581000)
<br /> libresolv.so.2 => /lib/libresolv.so.2 (0x005ac000)
<br /> /lib/ld-linux.so.2 (0x00e11000)
<br /> libkrb5support.so.0 => /lib/libkrb5support.so.0 (0x00501000)
<br /> libkeyutils.so.1 => /lib/libkeyutils.so.1 (0x0050d000)
<br /> libselinux.so.1 => /lib/libselinux.so.1 (0x00bfc000)
</div>
<div>
</div>
<div>
When I check a zip-archiv it shows this:
</div>
<div>
</div>
<div>
<p>[root@mailscanner ~]# clamscan putty.zip</p>
<p>putty.zip: Sanesecurity.Foxhole.Zip_exe.UNOFFICIAL FOUND</p>
<p>----------- SCAN SUMMARY -----------<br />Known viruses: 4478278<br />Engine version: 0.98.6<br />Scanned directories: 0<br />Scanned files: 1<br />Infected files: 1<br />Data scanned: 0.00 MB<br />Data read: 0.25 MB (ratio 0.00:1)<br />Time: 16.959 sec (0 m 16 s)</p>
<p> </p>
<p> </p>
<p>[root@mailscanner ~]# clamscan putty.rar</p>
<p>putty.rar: OK</p>
<p>----------- SCAN SUMMARY -----------</p>
<p>Known viruses: 4478278 <br />Engine version: 0.98.6 <br />Scanned directories: 0 <br />Scanned files: 1 <br />Infected files: 0 <br />Data scanned: 0.22 MB <br />Data read: 0.22 MB (ratio 1.00:1) <br />Time: 17.652 sec (0 m 17 s)</p>
</div>
<div>
</div>
<div>
</div>
<div>
But this is maybe just a side-problem, I was hoping to get the filetype recognition working in MS.
</div>
<div>
</div>
<div>
Here my Settings regarding rar/unrar in MailScanner.conf:
</div>
<div>
</div>
<div>
Unrar Command = /usr/bin/unrar
<br />Unrar Timeout = 50
</div>
<div>
</div>
<div>
</div>
<div>
Best regards
</div>
<div>
Volker
</div>
<div>
<br />> Rick Cooper <rcooper@dwford.com> hat am 15. April 2015 um 02:03 geschrieben:
<br />>
<br />>
<br />> Volker Dose wrote:
<br />> > Hi,
<br />> >
<br />> > I have already configured the foxhole-stuff and it works brilliantly
<br />> > on zip-files. But no effect on executables in rar-archives.
<br />> >
<br />> > I was reading, that clam has no support for opening and scanning
<br />> > rar-archives because of license issues. I have the actual clamav
<br />> > installed and even tried to compile from scratch, but no success
<br />> > -rar-files are not scanned.
<br />>
<br />> ClamAv has had RAR capabilities since verion 0.90.
<br />> Now, from what I remember Fedora does not include libunrar (even though it's
<br />> free) and I think there version of the rpm uses the --disable-unrar switch
<br />> as well. Don't remember if you are using fedora or not.
<br />>
<br />>
<br />> Also you have to have unrar installed for MailScanner to unpack it.
<br />> Look in the MailScanner.conf for
<br />>
<br />> MailScanner.conf:Unrar Command = /usr/bin/unrar
<br />>
<br />> And point it to your unrar binary
<br />>
<br />>
<br />> --
<br />> MailScanner mailing list
<br />> mailscanner@lists.mailscanner.info
<br />> http://lists.mailscanner.info/listinfo/mailscanner
<br />>
</div>
</body></html>