compressed files and 3rd-party tools to unpack them - why not let them do the job?

[Hoyer-Reuther, Christian]

Hi Stefan,

amavis needs the decoders to detect banned files in archives. For example, if no decoder for .rar is used then exe files in rar archives will not be detected.

Regards,

Christian

Von: amavis-users <amavis-users-bounces+christian.hoyer-reuther=cac-chem.de at amavis.org> Im Auftrag von Stefan Bauer
Gesendet: Donnerstag, 1. August 2019 14:46
An: amavis-users at amavis.org
Betreff: compressed files and 3rd-party tools to unpack them - why not let them do the job?

Hi list,

we have (as many others) following chain:

postfix (smtpd_milters) -> amavis (15-av_scanners)-> clamav

E-mails with - for example - .rar-attachments can be unpacked with clam and checked properly.

However why is amavis also able to unpack rar-files or reports the lack of support for this?

No decoder for       .rar  tried:  unrar-free

I have no problem to install unrar-free, I'm asking, why it would make sense to have support in amavis or what might be the reasons, to keep unpacking, clamavs job.

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.amavis.org/pipermail/amavis-users/attachments/20190801/58df5223/attachment.html>