-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tomasz Kojm wrote: > On Wed, 28 Feb 2007 19:04:43 +0100 > Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > >> There is a reason if we (clamwin) changed this, we still prefer to skip >> unknown files, and we don't need to care much about html and mail > > You don't need to care about HTML? > >> files, so I've made some tweaks (not only this one) to save some >> cpu cycles avoiding scan of unneeded files. > > I wouldn't call it a tweak, I'd call it an error. Your change introduced much > more serious problems.
It's not always needed, my "tweaks" are disabled by default in my port (but enabled in clamwin) and are optionals. The users known about it. > >> I'm aware that for a mail server scanner it's not the correct approach, >> so in fact my post was only a "comment", it was never intended to >> be in clamav tree. >> A scan of a real pc hd can take ages, clamscan without any change >> scans large avi files in raw mode (there is only a specific check for >> anim riffs), other media files and e.g. iso files are also scanned in >> raw mode. >> 10-20gb of media/iso is not uncommon to find in a user pc, while >> they are very unlikely to be in a mail. > > Still there are better ways to deal with big files than breaking important > parts of code. Currently my tweaks do (if enabled): - - skip avi scan in raw mode, only anim riffs are scanned, there are really many avi signatures in the db? - - skip media files detected by magic, yes it can be dangerous but it's anyway an option - - skip unknown binary files, it really worths scanning? - - skip raw scan on iso files, how many iso signature are currently in? files in the iso can also be unaligned to do a raw scan I think clamav is focused for a different target than an user hard disk, since a 80 gb hard disk can take even a week to complete the scan, without skipping files. It seams you want flame me, I've only expressed my opinions but not asked you to use my decisions. I think I don't cause any users complain to main clamav devel about our choices, clamwin has a different name, but if you feel it's not suitable to maintain the name ClamAV with my mods, I can rename also my cmdline native port on my page. I hope I'm free to add / remove / change the code, my changes are public, some can be usefull for you some not, some "dis-useful" My best regards - -- Gianluigi Tiesi <[EMAIL PROTECTED]> EDP Project Leader Netfarm S.r.l. - http://www.netfarm.it/ Free Software: http://oss.netfarm.it/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF5eEO3UE5cRfnO04RAqL3AKCa1OoGdwb27Co/Y4tiQ7PgNz1b3gCgxuLy YlSYp3ovdE2CRgHi/OtHpPg= =B5qf -----END PGP SIGNATURE----- _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
