Re: [Clamav-users] Oversized Zip, again ...

2003-12-02 Thread McKeever Chris
On Mon, 1 Dec 2003 23:39 , Tomasz Kojm <[EMAIL PROTECTED]> sent: >On Fri, 28 Nov 2003 18:24:02 +0100 >Tomasz Papszun [EMAIL PROTECTED]> wrote: > >> I think that this parameter should be made runtime configurable (in >> clamav.conf). Not every site compiles Clamav on its own. > >You can now setup

Re: [Clamav-users] Oversized Zip, again ...

2003-12-01 Thread Tomasz Kojm
On Fri, 28 Nov 2003 18:24:02 +0100 Tomasz Papszun <[EMAIL PROTECTED]> wrote: > I think that this parameter should be made runtime configurable (in > clamav.conf). Not every site compiles Clamav on its own. You can now setup the limit with ArchiveMaxCompressionRatio in clamav.conf. Best regards,

Re: [Clamav-users] Oversized Zip, again ...

2003-12-01 Thread Tomasz Kojm
On Mon, 1 Dec 2003 11:20:39 GMT Tomasz Klim <[EMAIL PROTECTED]> wrote: > The right solution is to decompress files block-by-block, and scanning > only that block, like it is done for reading and scanning file from > a descriptor. But this requires direct integration of unzip and scan > code. I kno

Re: [Clamav-users] Oversized Zip, again ...

2003-12-01 Thread Tomasz Klim
> On Fri, 28 Nov 2003 at 21:24:43 -0800, Chris Paul wrote: > > On Fri, 28 Nov 2003 18:24:02 +0100 > > Tomasz Papszun <[EMAIL PROTECTED]> wrote: > > > > > I have also seen stopped .doc files compressed with ratio 236. > > > And .dbf files with ratio 1101. Also, .wav files with ratio 1182. > > >

Re: [Clamav-users] Oversized Zip, again ...

2003-12-01 Thread Tomasz Papszun
On Fri, 28 Nov 2003 at 21:24:43 -0800, Chris Paul wrote: > On Fri, 28 Nov 2003 18:24:02 +0100 > Tomasz Papszun <[EMAIL PROTECTED]> wrote: > > > I have also seen stopped .doc files compressed with ratio 236. > > And .dbf files with ratio 1101. Also, .wav files with ratio 1182. > > > > Users send

Re: [Clamav-users] Oversized Zip, again ...

2003-11-29 Thread Thomas Lamy
Tomasz Papszun wrote: On Thu, 27 Nov 2003 at 23:54:14 +0100, Tomasz Kojm wrote: On Thu, 27 Nov 2003 18:03:06 +0900 Jerome Schlumberger <[EMAIL PROTECTED]> wrote: Can someone explain me about the libclamav/scanners.c and this value at the line 64 ? Should I increase it again ? Please set it to 70

Re: [Clamav-users] Oversized Zip, again ...

2003-11-28 Thread Chris Paul
On Fri, 28 Nov 2003 18:24:02 +0100 Tomasz Papszun <[EMAIL PROTECTED]> wrote: > I have also seen stopped .doc files compressed with ratio 236. > And .dbf files with ratio 1101. Also, .wav files with ratio 1182. > > Users send quite strange things. So an admin may be forced to set > ZIPOSDET for s

Re: [Clamav-users] Oversized Zip, again ...

2003-11-28 Thread Tomasz Papszun
On Thu, 27 Nov 2003 at 23:54:14 +0100, Tomasz Kojm wrote: > On Thu, 27 Nov 2003 18:03:06 +0900 > Jerome Schlumberger <[EMAIL PROTECTED]> wrote: > > > Can someone explain me about the libclamav/scanners.c and this value > > at the line 64 ? Should I increase it again ? > > Please set it to 70 - we

Re: [Clamav-users] Oversized Zip, again ...

2003-11-28 Thread Tomasz Kojm
On Fri, 28 Nov 2003 10:11:35 +0900 Jerome Schlumberger <[EMAIL PROTECTED]> wrote: > Ok, I am going to try this, but could you explain to the list what is > the point of this parameter ? if (original_size / compressed_size >= ZIPOSDET) return Oversized.Zip Best regards, Tomasz Kojm -- oo

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Jerome Schlumberger
Ok, I am going to try this, but could you explain to the list what is the point of this parameter ? I'll be back if it doesn't work Thanks for your help Schlum On Friday 28 November 2003 07:54, Tomasz Kojm wrote: > On Thu, 27 Nov 2003 18:03:06 +0900 > > Jerome Schlumberger <[EMAIL PROTECTED]> w

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Tomasz Kojm
On Thu, 27 Nov 2003 18:03:06 +0900 Jerome Schlumberger <[EMAIL PROTECTED]> wrote: > Can someone explain me about the libclamav/scanners.c and this value > at the line 64 ? Should I increase it again ? Please set it to 70 - we need to find an optimal value. Best regards, Tomasz Kojm -- oo

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread J.D. Bronson
At 03:03 AM 11/27/2003, you wrote: Hello everybody, Two weeks ago I had some problems with a zip filed detected by clamav as "Oversized Zip". I read the posts and changed the libclamav/scanners.c, the line 64 as explained to the value of 50. After that everything worked well. But two days ago, sa

[Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Jerome Schlumberger
Hello everybody, Two weeks ago I had some problems with a zip filed detected by clamav as "Oversized Zip". I read the posts and changed the libclamav/scanners.c, the line 64 as explained to the value of 50. After that everything worked well. But two days ago, same story, an "Oversized Zip" was