[clamav-users] Why is ArchiveBlockMax obsoleted?
vladislav.kurz at webstep.net
Thu Feb 26 04:46:47 EST 2015
in response to recent wave of viruses that were not detected by any antivirus,
we decided to simply block any nested zip files. (Exe inside Zip inside Zip).
So I tried to set MaxRecursion=1, just to find out that it passes such files
as clean without scanning deeper. I want to block such files in the same
manner as encrypted archives, but the ArchiveBlockMax option is obsolete. Why?
Is there any undocumented replacement option for that?
On some man pages I found --max-block, but that is ignored as well.
Is there any reason to drop such function?
More information about the clamav-users