HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

Freebsd + Havp + Clamav 0.88.5
http://havp.hege.li/forum/viewtopic.php?f=3&t=181
Page 1 of 1

Author:  vittorio [ 02 Nov 2006 11:53 ]
Post subject:  Freebsd + Havp + Clamav 0.88.5

Platform : FreeBSD 6.1-RELEASE-p10
Havp : 0.82
Clamav 0.88.5

When i try to download any .cab file the result is:
havp[50117]: 192.168.0.70 GET 200 http://www.example.it/ims.cab 290+525736 SCANERROR ClamAV: MS CAB module failure

If i pass the same file to clamdscan all is ok?

Tnx

Why if reached maxscansize get the scanner Answer on a not coplete file (line 867)
866 //Check answers
867 TempScannerAnswer = Scanners.GetAnswer();
868 Scanners.ReinitTempFile();
869
870 AnswerDone = UnlockDone = true;
871
872 //Exit bodyloop if error or virus found
873 if ( TempScannerAnswer != 0 ) break;

Author:  hege [ 02 Nov 2006 15:31 ]
Post subject:  Re: Freebsd + Havp + Clamav 0.88.5

vittorio wrote:
Platform : FreeBSD 6.1-RELEASE-p10
Havp : 0.82
Clamav 0.88.5

When i try to download any .cab file the result is:
havp[50117]: 192.168.0.70 GET 200 http://www.example.it/ims.cab 290+525736 SCANERROR ClamAV: MS CAB module failure

If i pass the same file to clamdscan all is ok?

Tnx

Why if reached maxscansize get the scanner Answer on a not coplete file


Thanks, you found a small logic error. :)

Naturally when we reach maxscansize, the not complete tempfile must be scanned, because we are not writing it anymore. Then we know if we can continue sending rest of the file directly to client.

We should ignore all errors from scanners from incomplete files.. It will be fixed in 0.84.

Cheers,
Henrik

Author:  hege [ 02 Nov 2006 15:42 ]
Post subject: 

If you want a quick fix to your compile, replace line 872->

Code:
//Exit bodyloop only if virus found. Ignore scanner errors
//because incomplete archives might produce them.
if ( TempScannerAnswer == 1 ) break;
TempScannerAnswer = 0;

Author:  vittorio [ 02 Nov 2006 17:13 ]
Post subject: 

hege wrote:
If you want a quick fix to your compile, replace line 872->

Code:
//Exit bodyloop only if virus found. Ignore scanner errors
//because incomplete archives might produce them.
if ( TempScannerAnswer == 1 ) break;
TempScannerAnswer = 0;


Tnx...

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/