I'm seeing the same thing here using MIMEdefang 2.36, and ClamAV 0.60. Uncompressed files get caught, but ZIP's do not. I've run 'clamscan' manually on ZIP files, and it works fine.
So you're not the only one seeing this -- I've reinstalled everything twice over, making absolutely positively sure I've installed everything 'to the letter'. J -----Original Message----- From: Russell Premont [mailto:[EMAIL PROTECTED] Sent: Thursday, August 21, 2003 11:51 AM To: Clamav-Users Cc: Amavis-users Subject: [Clamav-users] Compressed files not being scanned I am running Solaris 9 Sparc with Amavis-ng 1.6.4 and ClamAV 0.60. Clam is scanning non compressed files but does not seem to be scanning any compressed files. When I tail the syslog I see the following: Aug 21 11:29:26 mail courierd: [ID 702911 mail.info] Waiting. shutdown time=none, wakeup time=Thu Aug 21 11:34:39 2003, queuedelivering=25, inprogress=1 Aug 21 11:29:27 mail amavis[10644]: Starting AMaViS 0.1.6.4 Aug 21 11:29:28 mail amavis[10644]: Unpacking message in /tmp/amavis-unpack-3f44e558-2994 Aug 21 11:29:28 mail amavis[10644]: AMAVIS: Determined 00000000 to be type text/plain Aug 21 11:29:28 mail amavis[10644]: Not attempting to unpack 00000000 Aug 21 11:29:29 mail amavis[10644]: AMAVIS::MTA::Maildrop: Accepting message Aug 21 11:29:29 mail amavis[10644]: AMAVIS: Cleaning up. Aug 21 11:29:29 mail amavis[10644]: AMAVIS: Done. I have done tests using the Eicars test virus, and if I just send the virus through Clam picks it up, but if I compress it with any type of compression software I see the above message logged and it passes through the system without being caught. I have tested the decompression utilities on the system and they are all working fine. Can anyone give me some insight as to what the issue may be, or how I can get more specific information to help define where the problem is? Thank You ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
