Activity for Markus Strehle

  • Markus Strehle Markus Strehle modified ticket #23

    ClamAV not listentnig on port

  • Markus Strehle Markus Strehle posted a comment on ticket #23

    I have setup SLES15 SP2 and there the port was 3310, however if it is in your case 5555 Then please setup INITSERVERS with parameter tcp://127.0.0.1:5555

  • Markus Strehle Markus Strehle posted a comment on ticket #23

    Hi Robert, I will take it. Let me reproduce it. So you use clamd (daemon) and you want use libclamdsap.so with VSCAN_RFC About your question 2. You can define all parameters including the connect to clamd in VSCANGROUP.

  • Markus Strehle Markus Strehle modified ticket #3

    Bulding ClamSAP on AIX

  • Markus Strehle Markus Strehle posted a comment on ticket #3

    Hello Ladislav, I close this, because I cannot change the build environment of clamav.

  • Markus Strehle Markus Strehle modified ticket #19

    TCP port change and Local TCPsocket support

  • Markus Strehle Markus Strehle posted a comment on ticket #19

    here my clamconf Software settings Version: 0.103.8 Optional features supported: MEMPOOL IPv6 AUTOIT_EA06 BZIP2 LIBXML2 PCRE2 ICONV JSON Database information Database directory: /var/lib/clamav daily.cvd: version 26954, sigs: 2037855, built on Thu Jun 29 07:29:58 2023 main.cld: version 62, sigs: 6647427, built on Thu Sep 16 12:32:42 2021 bytecode.cvd: version 334, sigs: 91, built on Wed Feb 22 21:33:21 2023 main.cvd: version 62, sigs: 6647427, built on Thu Sep 16 12:32:42 2021 Total number of signatures:...

  • Markus Strehle Markus Strehle posted a comment on ticket #19

    Hello Julien, I have setup your configuration and I see clamd running on different than 3310 and from VSI that is supported too. What I did 1. Changed the TCP port in clamd.conf . Depending on your OS , search for clamd.conf and change or add : - TCPSocket 8888 TCPAddr 127.0.0.1 Ensure that no other sections with TCPSocket are in clamd.conf. 2. Restart clamd, e.g. sudo clamd -c /etc/clamd.conf 3. Check LISTEN, e.g. netstat -ln , search for entries and check that 8888 is visible. In your case 3310...

  • Markus Strehle Markus Strehle posted a comment on ticket #3

    Hello Ladislav, I tried to build the source on AIX but could not get a machine anymore. The problem with platforms different to Linux is, that support for a platform needs also involvement from the vendor of the platform. In best case the vendor officially support the open-source. In case of clamsap you need to know that this is only a small wrapper but the AV protection is in clamav. I am not really sure if IBM supports clamav officially, but found https://clamav-users.clamav.narkive.com/WEHNQ0Rf/clamav-support-for-aix-7-1...

  • Markus Strehle Markus Strehle modified ticket #17

    Extension is not compatible to MIME type because of charset

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    close because of last feedback, thanks

  • Markus Strehle Markus Strehle modified ticket #2

    Virus scan interface for ClamSAP AV

  • Markus Strehle Markus Strehle posted a comment on ticket #2

    Hi Sanjeev, you need to ask the SAP support. here. ClamSAP supports VSI, but not the other way around. So you can use clamsap in combination with clamav and contect to a SAP system - using VSI. Symantec is another vendor/product. kind regards, -markus

  • Markus Strehle Markus Strehle posted a comment on ticket #2

    Hi Sanjeev, you need to ask the SAP support. here. ClamSAP supports VSI, but not the other way around. So you can use clamsap in combination with clamav and contect to a SAP system - using VSI. Symantec is another vendor/product. kind regards, -markus

  • Markus Strehle Markus Strehle modified ticket #18

    Can the isHTMLCharacter() whitelist used to determine MIME types be amended?

  • Markus Strehle Markus Strehle modified ticket #18

    Can the isHTMLCharacter() whitelist used to determine MIME types be amended?

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    Thank you for the answer I will close this bug

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    Thank you for the answer I will close this bug

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    ok, thanks for the response, so if you need a package for RedHat or older SUSE OSes you can use https://sourceforge.net/projects/clamsap/files/RPM/clamsap-0.104.3-1.x86_64.rpm/download or if you tell me your architecture I can check if I am able to provide a test library for you.

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    Hi, in general I would like to know if the XML detection you mentioned at the begin now is solved with the library version 104.3 because here I enhanced the check to use libmagic . The internal function isHTMLCharacter was a shortcut before using libmagic and still is a shortcut to check if syntax is XML with only ASCII chars. If any non-ascii character is found now the libmagic check is done, but the final decision should be application/xml independent from encoding inside the content kind rega...

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    Hi, dont know if this bug mixes some questions, however here you mean you have a Excel file rename to .xml only or do you have converted a Excel file to .xml via export. I ask because if you simply use the xlsx file then this is internally a ZIP package and due to misleading MIME detecting this will fail and should fail. I tried this and internally office is detected via libmagic but a file extension .xml is not compatible to office and therefore it fails. If you have exported from Excel your content...

  • Markus Strehle Markus Strehle modified ticket #11

    Lessons Learned for Windows Install

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    Hi Matthieu, thanks a lot! I created a new patch and the OpenSuse repos http://download.opensuse.org/repositories/security should get it soon, e.g. http://download.opensuse.org/repositories/security/SLE_12_SP5/x86_64/ So please try if this fixes your issue. best regards, -markus

  • Markus Strehle Markus Strehle created a blog post

    0.104.3

  • Markus Strehle Markus Strehle committed [r61]

    0.104.3 Fix XML MIME type detection using libmagic

  • Markus Strehle Markus Strehle modified ticket #17

    Extension is not compatible to MIME type because of charset

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    commited a fix, are you able to verify it from source or due you need a library ? if you need a library for which OS ?

  • Markus Strehle Markus Strehle merged merge request #8

    Fix bug 17 due to refacatoring of object checks

  • Markus Strehle Markus Strehle created merge request #8

    Fix bug 17 due to refacatoring of object checks

  • Markus Strehle Markus Strehle modified ticket #18

    Can the isHTMLCharacter() whitelist used to determine MIME types be amended?

  • Markus Strehle Markus Strehle posted a comment on ticket #18

    Hi, the internal function is only valid for ASCII, yes and thus will re-use code from file (magic) to detect encoding and handle ASCII and UTF-8 . kind regards

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    Hi, I will re-use code from file to determine utf-8 so that it will end both in application/xml The internal function is only valid for ASCII I will do a fix in next weeks during summer vacation. regards

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    Hello Matthieu, ok, so in ABAP I now that there are restrictions in input field. I kow about length and characters restrictions, but I always recommend to report this as bug to support component BC-SEC-VIR. The check was defined according to https://datatracker.ietf.org/doc/html/rfc2045 and here charset is defined for text types, text/plain; charset="us-ascii". I have found VSA spec, see https://ftp.gwdg.de/pub/misc/sapdb/icc/nw-vsi/VSA-Specification.pdf so in Java the MIME type with charset is possible...

  • Markus Strehle Markus Strehle posted a comment on ticket #17

    Hello Matthieu, in the output and tests you see that difference comes from file utilities which is used to determine the MIME type. Since some week clamsap supports now simply wildcards and therefore I recommend that you set text/xml* as allowed or blocked MIME type and then this includes both charsets. If you want distinguish between both then define the types in full length, but if you dont want then use either text/ if you want allow all text types or only text/xml. Hope this helps best regards,...

  • Markus Strehle Markus Strehle created a blog post

    0.104.2

  • Markus Strehle Markus Strehle committed [r60]

    0.104.2 Relax javascript check in PDF

  • Markus Strehle Markus Strehle created a blog post

    0.104.1

  • Markus Strehle Markus Strehle committed [r59]

    0.104.1 Add feature: wildcard support for MIME settings

  • Markus Strehle Markus Strehle merged merge request #7

    Version Update 0.104.1

  • Markus Strehle Markus Strehle merged merge request #6

    Support wildcards for MIME parameters (positive/negative list)

  • Markus Strehle Markus Strehle created merge request #7

    Version Update 0.104.1

  • Markus Strehle Markus Strehle created merge request #6

    Support wildcards for MIME parameters (positive/negative list)

  • Markus Strehle Markus Strehle merged merge request #5

    Version Update 0.103.4

  • Markus Strehle Markus Strehle merged merge request #4

    Allow to ignore OpenAction in PDF documents

  • Markus Strehle Markus Strehle created merge request #5

    Version Update 0.103.4

  • Markus Strehle Markus Strehle committed [r58]

    update version 0.103.4

  • Markus Strehle Markus Strehle committed [r57]

    sync git development

  • Markus Strehle Markus Strehle created merge request #4

    Allow to ignore OpenAction in PDF documents

  • Markus Strehle Markus Strehle merged merge request #3

    fix SAR entry

  • Markus Strehle Markus Strehle created merge request #3

    fix SAR entry

  • Markus Strehle Markus Strehle committed [r56]

    fix clamsap settings

  • Markus Strehle Markus Strehle committed [r55]

    fix clamsap file resource leak

  • Markus Strehle Markus Strehle committed [r54]

    patch 0.103.3

  • Markus Strehle Markus Strehle updated merge request #2

    test

  • Markus Strehle Markus Strehle created merge request #2

    test

  • Markus Strehle Markus Strehle committed [r53]

    adopt for older clamav versions

  • Markus Strehle Markus Strehle committed [r52]

    clamsap 0.103.2

  • Markus Strehle Markus Strehle merged merge request #1

    Add RPm build tools

  • Markus Strehle Markus Strehle created merge request #1

    Add RPm build tools

  • Markus Strehle Markus Strehle committed [f5babb]

    add rpm build script

  • Markus Strehle Markus Strehle committed [r51]

    clamsap 0.103.2

  • Markus Strehle Markus Strehle modified ticket #14

    Support parameter SCANHEURISTICLEVEL

  • Markus Strehle Markus Strehle posted a comment on ticket #14

    done with last update

  • Markus Strehle Markus Strehle posted a comment on ticket #14

    done with last update

  • Markus Strehle Markus Strehle modified ticket #14

    Support parameter SCANHEURISTICLEVEL

  • Markus Strehle Markus Strehle committed [r50]

    clamsap 0.103.0

  • Markus Strehle Markus Strehle created ticket #14

    Support parameter SCANHEURISTICLEVEL

  • Markus Strehle Markus Strehle modified ticket #13

    MIME check JPEG

  • Markus Strehle Markus Strehle posted a comment on ticket #13

    fixed with https://sourceforge.net/projects/clamsap/files/latest/download

  • Markus Strehle Markus Strehle committed [r49]

    clamsap 0.101.9

  • Markus Strehle Markus Strehle created ticket #13

    MIME check JPEG

  • Markus Strehle Markus Strehle modified ticket #12

    Want to install anti-virus for our Sap Landscape

  • Markus Strehle Markus Strehle posted a comment on ticket #12

    Settings is ok. SUSE provides the setup, therefore you should always use zypper https://documentation.suse.com/sles-sap/12-SP4/html/SLES4SAP-guide/cha-clamsap.html

  • Markus Strehle Markus Strehle posted a comment on ticket #10

    close now

1 >
MongoDB Logo MongoDB