Re: [clamav-users] Scanning a large file through HTTP

2021-04-08 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 7 Apr 2021, Paul Kosinski via clamav-users wrote: Seems to me that this behavior, advertising a 4GB limit while silently imposing a 2GB limit and reporting "OK" for anything in between, is a *major* security flaw: ClamAV *must* report that the file was too big to deal with (ho

Re: [clamav-users] Scanning a large file through HTTP

2021-04-08 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 7 Apr 2021, Micah Snyder (micasnyd) via clamav-users wrote: There’s a lot of technical work to be done to safely raise that limitation, as large files of various file types types have never been tested. In my milter I've a pretty general-purpose Perl harness which can send d

Re: [clamav-users] Scanning a large file through HTTP

2021-04-07 Thread Paul Kosinski via clamav-users
Seems to me that this behavior, advertising a 4GB limit while silently imposing a 2GB limit and reporting "OK" for anything in between, is a *major* security flaw: ClamAV *must* report that the file was too big to deal with (however worded). Thus I've taken to using clamscan rather than clamdsc

Re: [clamav-users] Scanning a large file through HTTP

2021-04-07 Thread Micah Snyder (micasnyd) via clamav-users
Sarkar via clamav-users Sent: Wednesday, April 7, 2021 7:39 AM To: clamav-users@lists.clamav.net Cc: Saurav Sarkar Subject: [clamav-users] Scanning a large file through HTTP Hi All, We are using a HTTP enabled malware scanning service based on Clam AV. The service is made something like this

Re: [clamav-users] Scanning a large file through HTTP

2021-04-07 Thread Saurav Sarkar via clamav-users
Thanks a lot Paul and Ged for your replies. Perhaps i added too many confusing points in my question :). If i just consider myself as a developer of the HTTP Service for malware scanning. I would just like to know what could be the maximum file size which can be supported by ClamAV ? Is it 4 GB

Re: [clamav-users] Scanning a large file through HTTP

2021-04-07 Thread Paul Smith via clamav-users
On 07/04/2021 15:38, Saurav Sarkar via clamav-users wrote: We have files like CAD files which can go in GBs and want to send to this malware scanning service. Why are you scanning CAD files? Can your CAD files contain arbitrary executable code which is blindly executed by the CAD software?

Re: [clamav-users] Scanning a large file through HTTP

2021-04-07 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 7 Apr 2021, Saurav Sarkar via clamav-users wrote: We are using a HTTP enabled malware scanning service based on Clam AV. Perhaps you will get better answers if you address your questions to the supplier of this service. We have files like CAD files which can go in GBs and

[clamav-users] Scanning a large file through HTTP

2021-04-07 Thread Saurav Sarkar via clamav-users
Hi All, We are using a HTTP enabled malware scanning service based on Clam AV. The service is made something like this https://github.com/solita/clamav-rest We have files like CAD files which can go in GBs and want to send to this malware scanning service. Is there a possibility to send the fil