Manoj, Seem like this should work. What happens if you scan your tar and tar.gz files just using clamscan?
You can run your clamd in debug mode by setting "Foreground yes" and "Debug yes" in clamd.conf, then run clamd from a terminal window. This may give you an indication about why clamd does not see the inner file when using squid. Also, "LeaveTemporaryFiles yes" will keep the inner files from archives in the ClamAV temp directory for inspection. Hope this helps, Steve On Sun, Feb 15, 2015 at 11:30 PM, Manoj Ramakrishnan < manojramakrish...@nbnco.com.au> wrote: > Hi, > > I tried to scan tar files and tar.gz files using clamav(through squid, > squidclamav and c-icap) but it just pass through. Both these files contain > the "eicar.com" test file. > But if it is a zip file then it works!!! > > ScanArchive parameter is enabled in clamd.conf. > > Do I need any special setting to scan these files? I am using a RHEL5 > server and clamd/clamav version 0.98.5 > > Regards > Manoj Ramakrishnan > DevOps Engineer | POS | P +61 2 8918 5906 | M 0416 128 308 > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
