Page 1 of 1

messages with RAR attachment ending up in the error queue

Posted: Tue Aug 29, 2006 7:11 pm
by caribk
as a continuation of thread http://www.scalix.com/community/viewtopic.php?t=3468

the problem described in the abovementioned thread seem to be due to RAR file attachments, which causes the message (regardless of file size) to be place in the error queue.

anyone have any similar experiences?

using RHEL3 with Scalix 10.

Posted: Tue Aug 29, 2006 7:22 pm
by caribk
responding to my own post..
this behavior stops if you disable ScanRAR in /etc/clamd.conf (disabled by default)..

however, i would like to be able to scan RAR archives that are version 2.0 (apparent licensing issues with 3.x+).

alternatively, how could i purchase licensing to allow clamd to scan any type of RAR archive? this does present a problem w potential viruses, while the alternative of not allowing RAR archives at all is also problematic..

Posted: Wed Aug 30, 2006 11:46 pm
by neronsp
is this what your clamd.conf says?

# Close the connection when the data size limit is exceeded.
# The value should match your MTA's limit for a maximal attachment size.
# Default: 10M
StreamMaxLength 20M

make sure that your rar or unrar actually works. Check the PATHS too on amavisd-milter or amavis

Posted: Thu Aug 31, 2006 12:06 pm
by caribk
i'm not using amavisd.. using clamd and clamav-milter...

i have StreamMaxLength commented out, so i suppose the default 10M is used..

rar and unrar (version 3.51) works but anytime I uncomment ScanRAR it will not deliver messages with RAR attachments..