SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0000801: pop3 proxy filtert eicartestfile nicht heraus - MantisBT
MantisBT - Endian Firewall
View Issue Details
0000801Endian FirewallOther Servicespublic2008-05-14 11:462008-09-10 15:44
nikolai 
peter-endian 
normalminorhave not tried
closedfixed 
2.2-rc1 
2.2-rc32.2-rc2 
0000801: pop3 proxy filtert eicartestfile nicht heraus
clamav ist aktuell läuft und der pop3 proxy auch. trotzdem wurde das eicartestfile nicht herausgefiltert. der httpproxy blockt!
No tags attached.
Issue History
2008-05-14 11:46nikolaiNew Issue
2008-05-15 20:05peter-endianNote Added: 0001188
2008-05-15 20:05peter-endianStatusnew => confirmed
2008-05-15 20:05peter-endianTarget Version => 2.2
2008-05-16 19:04peter-endianNote Added: 0001196
2008-05-16 19:05peter-endianStatusconfirmed => resolved
2008-05-16 19:05peter-endianFixed in Version => 2.2
2008-05-16 19:05peter-endianResolutionopen => fixed
2008-05-16 19:05peter-endianAssigned To => peter-endian
2008-07-24 15:53ra-endianFixed in Version2.2 => 2.2-rc2
2008-07-27 20:18peter-endianStatusresolved => closed
2008-09-10 15:44chris-endianTarget Version2.2 => 2.2-rc3

Notes
(0001188)
peter-endian   
2008-05-15 20:05   
sieht so aus als würde clamd die eicar signatur nicht kennen.

clamdscan findet erkennt das eicar file nicht
clamscan aber schon

root@efw-frangart:~ # clamdscan /root/eicar.com
/root/eicar.com: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.001 sec (0 m 0 s)


root@efw-frangart:~ # clamscan /root/eicar.com
/root/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 285396
Engine version: 0.93
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 4.323 sec (0 m 4 s)

root@efw-frangart:~ # /etc/init.d/clamd restart
Stopping clamd: [ OK ]
Starting clamd: [ OK ]
/etc/init.d/clamd restart
root@efw-frangart:~ # clamdscan /root/eicar.com
/root/eicar.com: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.001 sec (0 m 0 s)
root@efw-frangart:~ #
(0001196)
peter-endian   
2008-05-16 19:04   
hier der quick-fix per patch:

Index: src/config/clamd.conf.tmpl
===================================================================
--- src/config/clamd.conf.tmpl (revision 13302)
+++ src/config/clamd.conf.tmpl (working copy)
@@ -27,7 +27,7 @@
 PhishingSignatures yes
 ScanHTML yes
 ScanArchive yes
-MaxScanSize ${ARCHIVE_MAXFILESIZE}
+MaxScanSize ${ARCHIVE_MAXFILESIZE}M # M is necessary! It means Megabyte!
 MaxRecursion ${ARCHIVE_MAXRECURSION}
 MaxFiles ${ARCHIVE_MAXFILES}
 #ArchiveMaxCompressionRatio ${ARCHIVE_MAXCOMPRESSIONRATIO}