HTTP Anti-Virus Proxy http://havp.hege.li/forum/
Possible issue with havp-0.88 http://havp.hege.li/forum/viewtopic.php?f=3&t=360	Page 1 of 1

---

Author:	karesmakro [ 23 Apr 2008 10:04 ]
Post subject:	Possible issue with havp-0.88
I made some tests with havp-0.88 and clamav-0.93 and i think there is an issue with cab-Archives. The new Version of havp handles zip, tar, tar.gz, tar.bz2 ... correctly and block them, if there was a virus detected. But tests with cab-archives failed! For example eicar.cab is seen in the access.log as ok. I found there another example for testvirus called motor.cab found in sourceforge from 2005: https://sourceforge.net/mailarchive/message.php?msg_id=Pine.LNX.4.61.0509141522080.31135%40patascoy.ovsp.gov.co sometimes the file is dectet correctly, but is not blocked by havp! I made tests on my debian server with amavis and clamav and the virus was detectet correctly and was blocked. Is there any bug in the new version of havp? I'm sending there a link, where any discussions around havp and clamav where happens: http://www.ipcop-forum.de/forum/viewtopic.php?f=28&t=20948 Best regards, karesmakro

---

Author:	hege [ 23 Apr 2008 10:34 ]
Post subject:	Re: Possible issue with havp-0.88
Not a problem of HAVP. $ wget http://meineipadresse.de/testvirus/eicar.cab $ clamscan eicar.cab eicar.cab: OK ----------- SCAN SUMMARY ----------- Known viruses: 278860 Engine version: 0.93 Scanned directories: 0

---

Author:	karesmakro [ 23 Apr 2008 10:38 ]
Post subject:	Re: Possible issue with havp-0.88
In other words you want to say, there is an issue in clamav?

---

Author:	hege [ 23 Apr 2008 10:42 ]
Post subject:	Re: Possible issue with havp-0.88
Isn't it obvious? I opened a bug: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=986

---

Author:	karesmakro [ 23 Apr 2008 10:48 ]
Post subject:	Re: Possible issue with havp-0.88
o.k. thanks for spending time and best regards

---

Page 1 of 1	All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/