Report on EFW 2.1.2 and clamav 0.93.1 for EFW 2.1.1 from Stellarcore

[Igor Mikolic-Torreira]

Hi,

I have tried out the various clamav updates that Mike
Tremaine produced for for EFW 2.1.1 systems on my EFW 2.1.2
system.

(1) Recommend installing the clamav-0.92.1 (and related)
updates on EFW 2.1.2.  It works just fine for me.

(2) Recommend NOT installing the clamav-0.93.1 update on EFW
2.1.2 at this time -- it breaks EFW 2.1.2 unless changes are
made to the EFW side of the system.

As others have pointed out, clamav-0.93.1 made changes to
the ABI and config options.

In particular, the problem options are:

MailMaxRecursion
ArchiveMaxFileSize
ArchiveMaxRecursion
ArchiveMaxFiles
ArchiveMaxCompressionRatio

These need to be replaced and they don't exactly map 1-to-1
to the new options, so corresponding GUI changes are needed.

More specifically:

(1) /etc/clamav/clamav.conf.tmpl has to be edited to reflect
the new options (easy to do)

(2) /home/httpd/cgi-bin/endianclamav.pl has to be edited to
reflect the new config options in the GUI.  As Perl is
something I rarely dabble in (sorry, I'm a Python guy) the
edits are probably fairly easy, but I unfortunately couldn't
crank out the changes in the time I had tonight.

I hope to find the time to do this in the next week or two.
  Obviously I will post the changes back to the list.

Regards,

Igor

P.S. Mike Tremaine's Stellarcore archive is at:
http://www.stellarcore.net/projects/endian/


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[compdoc]

Im trying to update clamav, but I can't get a good download
of any of these files.

I have to d/l to my desktop, then copy them with my SSH/SCP
client to the efw.

But I'm getting "MD5 sum mismatch" when trying to install.

Theres no basic utils like wget on efw. Whats the secret?
Any way to d/l them directly to the firewall?



-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[compdoc]

Never mind - I used curl

-----Original Message-----
From: efw-user-bounces@...
[mailto:efw-user-bounces@...] On Behalf Of
compdoc
Sent: Friday, July 04, 2008 6:41 AM
To: efw-user@...
Subject: Re: [Efw-user] Report on EFW 2.1.2 and clamav
0.93.1 for EFW 2.1.1 from Stellarcore

Im trying to update clamav, but I can't get a good download
of any of these files.

I have to d/l to my desktop, then copy them with my SSH/SCP
client to the efw.

But I'm getting "MD5 sum mismatch" when trying to install.

Theres no basic utils like wget on efw. Whats the secret?
Any way to d/l them directly to the firewall?



------------------------------------------------------------
-------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE
NOW!
Studies have shown that voting for your favorite open source
project,
along with a healthy diet, reduces your potential for
chronic lameness
and boredom. Vote Now at
http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[Mike Tremaine]

Igor Mikolic-Torreira wrote:

> Hi,
>
> I have tried out the various clamav updates that Mike
> Tremaine produced for for EFW 2.1.1 systems on my EFW 2.1.2
> system.
>
> (1) Recommend installing the clamav-0.92.1 (and related)
> updates on EFW 2.1.2.  It works just fine for me.
>
> (2) Recommend NOT installing the clamav-0.93.1 update on EFW
> 2.1.2 at this time -- it breaks EFW 2.1.2 unless changes are
> made to the EFW side of the system.
>
> As others have pointed out, clamav-0.93.1 made changes to
> the ABI and config options.
>
> In particular, the problem options are:
>
> MailMaxRecursion
> ArchiveMaxFileSize
> ArchiveMaxRecursion
> ArchiveMaxFiles
> ArchiveMaxCompressionRatio
>
> These need to be replaced and they don't exactly map 1-to-1
> to the new options, so corresponding GUI changes are needed.
>
> More specifically:
>
> (1) /etc/clamav/clamav.conf.tmpl has to be edited to reflect
> the new options (easy to do)
>
> (2) /home/httpd/cgi-bin/endianclamav.pl has to be edited to
> reflect the new config options in the GUI.  As Perl is
> something I rarely dabble in (sorry, I'm a Python guy) the
> edits are probably fairly easy, but I unfortunately couldn't
> crank out the changes in the time I had tonight.
>
> I hope to find the time to do this in the next week or two.
>   Obviously I will post the changes back to the list.
>

The file /home/httpd/cgi-bin/endianclamav.pl is from the package
efw-clamav ... I have edited this for the 0.93+ release but as stated it
is a Endian 2.0 package so you'd want to extract that and compare the
changes.

If anyone feels like chasing that down I pushed the file into the
2.1-updates directory. [I do not have working 2.1 development box
anymore]. But you would want to grab endianclamav.pl and copy it over
the exiting one. If it works ok then grab the efw-clamav source package
and the endianclamav.pl file and rebuild the package.

-Mike

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[Igor Mikolic-Torreira]

Mike Tremaine wrote:
>
> If anyone feels like chasing that down I pushed the file into the
> 2.1-updates directory. [I do not have working 2.1 development box
> anymore]. But you would want to grab endianclamav.pl and copy it over
> the exiting one. If it works ok then grab the efw-clamav source package
> and the endianclamav.pl file and rebuild the package.
>
>

Mike,

Thanks.  A quick comparison of the 2.0 and 2.1 versions of
endianclamav.pl shows significant differences not related to
clamav 0.93.  So it isn't a drop in replacement.  I'll work
to make the needed mods to 2.1.2 endianclamav.pl this coming
week.  The needed changes are fairly straightforward -- I
just need to make sure I don't goof up the perl.

BTW, I see from some googling that ArchiveBlockMax is no
longer supported in clamav 0.93, as well as discussions of
the problems this presents (e.g., see
http://www.nabble.com/clamav-0.93-patch-block-max%E2%80%8E-td18108293.html)
It there anything that should be done to work around this or
otherwise mitigate the risk?

Regards,

Igor



-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user