Endian Bugtracker
Endian Issue Tracker

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0000801 [Endian Firewall] Other Services minor have not tried 2008-05-14 13:46 2008-09-10 17:44
Reporter nikolai View Status public  
Assigned To peter
Priority normal Resolution fixed  
Status closed   Product Version 2.2-rc1
Summary 0000801: pop3 proxy filtert eicartestfile nicht heraus
Description clamav ist aktuell läuft und der pop3 proxy auch. trotzdem wurde das eicartestfile nicht herausgefiltert. der httpproxy blockt!
Additional Information
Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0001188)
peter (administrator)
2008-05-15 22:05

sieht so aus als würde clamd die eicar signatur nicht kennen.

clamdscan findet erkennt das eicar file nicht
clamscan aber schon

root@efw-frangart:~ # clamdscan /root/eicar.com
/root/eicar.com: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.001 sec (0 m 0 s)


root@efw-frangart:~ # clamscan /root/eicar.com
/root/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 285396
Engine version: 0.93
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 4.323 sec (0 m 4 s)

root@efw-frangart:~ # /etc/init.d/clamd restart
Stopping clamd: [ OK ]
Starting clamd: [ OK ]
/etc/init.d/clamd restart
root@efw-frangart:~ # clamdscan /root/eicar.com
/root/eicar.com: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.001 sec (0 m 0 s)
root@efw-frangart:~ #
(0001196)
peter (administrator)
2008-05-16 21:04

hier der quick-fix per patch:

Index: src/config/clamd.conf.tmpl
===================================================================
--- src/config/clamd.conf.tmpl (revision 13302)
+++ src/config/clamd.conf.tmpl (working copy)
@@ -27,7 +27,7 @@
 PhishingSignatures yes
 ScanHTML yes
 ScanArchive yes
-MaxScanSize ${ARCHIVE_MAXFILESIZE}
+MaxScanSize ${ARCHIVE_MAXFILESIZE}M # M is necessary! It means Megabyte!
 MaxRecursion ${ARCHIVE_MAXRECURSION}
 MaxFiles ${ARCHIVE_MAXFILES}
 #ArchiveMaxCompressionRatio ${ARCHIVE_MAXCOMPRESSIONRATIO}

- Issue History
Date Modified Username Field Change
2008-05-14 13:46 nikolai New Issue
2008-05-15 22:05 peter Note Added: 0001188
2008-05-15 22:05 peter Status new => confirmed
2008-05-15 22:05 peter Target Version => 2.2
2008-05-16 21:04 peter Note Added: 0001196
2008-05-16 21:05 peter Status confirmed => resolved
2008-05-16 21:05 peter Fixed in Version => 2.2
2008-05-16 21:05 peter Resolution open => fixed
2008-05-16 21:05 peter Assigned To => peter
2008-05-17 13:39 schwable Issue Monitored: schwable
2008-07-24 17:53 ra Fixed in Version 2.2 => 2.2-rc2
2008-07-27 22:18 peter Status resolved => closed
2008-09-10 17:44 chris Target Version 2.2 => 2.2-rc3

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Mantis [^]
Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker