[clamav-users] clamsmtpd does not scan rar files

Gary R. Schmidt grschmidt at acm.org
Tue Feb 4 01:28:45 UTC 2020


On 04/02/2020 11:38, Ntek, SIA Janis wrote:
> Hello!
> 
> I have Debian 9.7 w/ postfix and ClamAV 0.100.2  I have made custom 
> definition file /var/lib/clamav/archive_exe.cdb containing:
> Archived_EXE:*:*:.*\.exe:*:*:*:*:*:*
> So that every archive packed with exe would be treated as a virus. This 
> works with .zip files and .7zip files but not with .rar files. I 
> installed unrar package and libclamunrar9, restarted daemons and the 
> system but still .rar files containing exe are let through.
> I read that at some point unrar code was removed from ClamAV and now it 
> only supports rar versions 1-2 but not 3. How to work around this? 
> Someone suggested using --unrar option, but where do I put it? Conf file 
> syntax doesn't seem to support this.
> 
Just build ClamAV from source, with "--enable-unrar" and anything else 
you need, thus avoiding any reliance on someone else building it with 
what you want.

	Cheers,
		Gary	B-)



More information about the clamav-users mailing list