[clamav-users] clamsmtpd does not scan rar files

Ntek, SIA Janis info at ntek.lv
Tue Feb 4 00:38:28 UTC 2020


Hello!

I have Debian 9.7 w/ postfix and ClamAV 0.100.2  I have made custom 
definition file /var/lib/clamav/archive_exe.cdb containing:
Archived_EXE:*:*:.*\.exe:*:*:*:*:*:*
So that every archive packed with exe would be treated as a virus. This 
works with .zip files and .7zip files but not with .rar files. I 
installed unrar package and libclamunrar9, restarted daemons and the 
system but still .rar files containing exe are let through.
I read that at some point unrar code was removed from ClamAV and now it 
only supports rar versions 1-2 but not 3. How to work around this? 
Someone suggested using --unrar option, but where do I put it? Conf file 
syntax doesn't seem to support this.

Thanks
BR,
Janis.




More information about the clamav-users mailing list