[clamav-users] clamsmtpd does not scan rar files

[Scott Kitterman]

On February 4, 2020 1:28:45 AM UTC, "Gary R. Schmidt" <grschmidt at acm.org> wrote:
>On 04/02/2020 11:38, Ntek, SIA Janis wrote:
>> Hello!
>> 
>> I have Debian 9.7 w/ postfix and ClamAV 0.100.2  I have made custom 
>> definition file /var/lib/clamav/archive_exe.cdb containing:
>> Archived_EXE:*:*:.*\.exe:*:*:*:*:*:*
>> So that every archive packed with exe would be treated as a virus.
>This 
>> works with .zip files and .7zip files but not with .rar files. I 
>> installed unrar package and libclamunrar9, restarted daemons and the 
>> system but still .rar files containing exe are let through.
>> I read that at some point unrar code was removed from ClamAV and now
>it 
>> only supports rar versions 1-2 but not 3. How to work around this? 
>> Someone suggested using --unrar option, but where do I put it? Conf
>file 
>> syntax doesn't seem to support this.
>> 
>Just build ClamAV from source, with "--enable-unrar" and anything else 
>you need, thus avoiding any reliance on someone else building it with 
>what you want.

That doesn't actually address the OP's question.  With libclamunrar9 installed, the Debian package has the same capability as if you build from source.  Whatever problem they are having is very unlikely to be related to using our packages.

Scott K