> -----Original Message----- > Paul wrote: > > On 3 Jun 2008 at 11:28, Dickson, Paul wrote: > > > >> Is there a way that assp/clam can scan inside zip's? I clam > configured > >> to do so, but it isn't. I assume because it is taking the file as a > >> stream, or am I missing something? > > > > There must be something odd happening here, because I > > use other software that passes emails as stream to clamd > > which *does* find zipped malware. > > > > paul > > If it's passing it as a stream to clam then how could it scan the > contents of the zip without having the entire achieve downloaded? > Check the setting that tell ASSP how MUCH of the message to send to Clam (ClamAVBytes). Zip files have their index at the end, so clam may be unable to scan the zip contents unless this setting is larger than the message size. Mine, which I assume is the default is 60000 or 60Kb. This would mean with message headers, content and base-64 encoding, you are looking at about 42Kb zip file. How large is the ZIP file you need to scan?
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
