HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: 23 Apr 2008 10:04 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
I made some tests with havp-0.88 and clamav-0.93 and i think there is an issue with cab-Archives.
The new Version of havp handles zip, tar, tar.gz, tar.bz2 ... correctly and block them, if there was a virus detected. But tests with cab-archives failed!
For example eicar.cab is seen in the access.log as ok.
I found there another example for testvirus called motor.cab found in sourceforge from 2005:
https://sourceforge.net/mailarchive/message.php?msg_id=Pine.LNX.4.61.0509141522080.31135%40patascoy.ovsp.gov.co
sometimes the file is dectet correctly, but is not blocked by havp!
I made tests on my debian server with amavis and clamav and the virus was detectet correctly and was blocked.
Is there any bug in the new version of havp?

I'm sending there a link, where any discussions around havp and clamav where happens:
http://www.ipcop-forum.de/forum/viewtopic.php?f=28&t=20948

Best regards, karesmakro


Top
 Profile  
 
PostPosted: 23 Apr 2008 10:34 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Not a problem of HAVP.

$ wget http://meineipadresse.de/testvirus/eicar.cab
$ clamscan eicar.cab
eicar.cab: OK

----------- SCAN SUMMARY -----------
Known viruses: 278860
Engine version: 0.93
Scanned directories: 0


Top
 Profile  
 
PostPosted: 23 Apr 2008 10:38 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
In other words you want to say, there is an issue in clamav?


Top
 Profile  
 
PostPosted: 23 Apr 2008 10:42 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Isn't it obvious?

I opened a bug:

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=986


Top
 Profile  
 
PostPosted: 23 Apr 2008 10:48 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
o.k. thanks for spending time and

best regards


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group