[clamav-users] clamsubmit fails with Authenticity token element not found.

Thu Jun 10 10:24:20 UTC 2021

Hi there,

On Thu, 10 Jun 2021, Virgo Pärna via clamav-users wrote:

> 	When trying to report false negative with clamsubmit it always fails
> with "Authenticity token element not found."
>
> ClamAV 0.103.2/26196/Wed Jun  9 14:11:28 2021 from Debian
> buster-updates.

This could be for any of several reasons, for example a packaging
problem, an installation issue, failure to follow the documentation...
so we need more information.  Probably quite a lot more.

When did you first use clamsubmit?
What did you do to configure it?
Can you show us terminal sessions (for example use 'script') including
the full commands you gave, any session logs, etc.?

In case it helps,

1. Here's the command template used in my (automated) submissions:

# grep clamsubmit mailabuse.conf
script /usr/bin/clamsubmit -N "G.W. Haywood" -e abuse at jubileegroup.co.uk -n FILE ; /usr/bin/logger -p mail.debug -t mailabuse "Submit FILE to ClamAV"

2. Here's a recent successful submission:

# cat /var/log/mail.log.2.gz | gunzip | tail -n 1
Apr 30 15:52:24 alpha mailabuse: Submit /tmp/32658a436bfa1bb404cfb9b36a1477396c8171e95556f455f3fa1d8a2d14e63a to ClamAV

3. Here's the response to that submission:

8<----------------------------------------------------------------------
> Date: Sat, 01 May 2021 06:29:24 +0000 (UTC)
> From: noreply at clamav.com
> Subject: ClamAV.net - Your malware submission
> To: abuse at jubileegroup.co.uk
> 
> <!DOCTYPE html>
> <html>
> <head>
>   <meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
> </head>
> <body>
> <p>
>   G.W. Haywood,
> </p>
> 
> <p>
>   Thank you again for your submission.
> </p>
> 
> <p>Your File:</br>
>   32658a436bfa1bb404cfb9b36a1477396c8171e95556f455f3fa1d8a2d14e63a (SHA256: 78e801975a08b6f22e0ef6b60b8db1cfedc9267a42bc1fd0d1a328ec30cf28ea)</br>
> </p>
> 
> </br>
>     <p>Our initial assessment has verified the sample as a threat & we will be publishing signatures for ClamAV.</p>
> 
> <p>-The ClamAV team</p>
> [snip]
> </html>
8<----------------------------------------------------------------------

HTH

-- 

73,
Ged.