[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ClamAV And unrar - Bug #465207



On Wed, Feb 27, 2008 at 01:06:33PM +0000, Stephen Gran wrote:
> This one time, at band camp, Johann Spies said:
> > On Wed, Feb 27, 2008 at 11:54:19AM +0000, Stephen Gran wrote:
> > > report to say:
> > > 
> > > "There is a hard coded path in clamscan that calls internal unpackers
> > > for zip and rar before trying the specified external unpackers.  This
> > > breaks rar and some zip scanning for no clearly good reason.  I am
> > > talking with upstream about it."
> > > 
> > 
> > Would that be the cause of a lot of entries like this in our exim logs:
> > 
> > 2008-02-27 06:28:19 1JUDru-0007jl-Va spam acl condition: error reading
> > from spamd socket: Connection timed out
> > ?
> 
> It seems unlikely to me that a failure to unpack something in clamav
> would lead to a timeout in spamd.  They each do their own mime
> handling.

That is a very polite answer to a stupid mistake I made.  I pasted the
wrong line into the email. Here is the intended log-entry which I
think might be related to this bug - or not?


2008-02-28 09:07:30 1JUcqv-0001DE-KH malware acl condition: clamd:
ClamAV returned
/var/spool/exim4/scan/1JUcqv-0001DE-KH/1JUcqv-0001DE-KH-00002.zip: Zip
module failure ERROR


Regards
Johann


-- 
Johann Spies          Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch

     "These things have I written unto you that believe on 
      the name of the Son of God; that ye may know that ye 
      have eternal life, and that ye may believe on the name
      of the Son of God."        I John 5:13 

Attachment: signature.asc
Description: Digital signature


Reply to: