Lyle Giese wrote:
> I had trouble finding a defination for what enable-experimental does and
> tried to ask here, but it's recommended and it allows PDF support to be
> enabled now.
The source code shows that ScanPDF is not limited by CL_EXPERIMENTAL:
if(cfgopt(copt, "ScanPDF")->enabled) {
logg("PDF support enabled.\n");
options |= CL_SCAN_PDF;
} else {
logg("PDF support disabled.\n");
}
if(cfgopt(copt, "ScanHTML")->enabled) {
logg("HTML support enabled.\n");
options |= CL_SCAN_HTML;
} else {
logg("HTML support disabled.\n");
}
#ifdef CL_EXPERIMENTAL
if(cfgopt(copt,"PhishingScanURLs")->enabled) {
...
#endif /* CL_EXPERIMENTAL */
Nor is it for clamscan:
#ifdef CL_EXPERIMENTAL
mprintf(" --no-phishing-scan-urls Disable url-based
phishing detection\n");
mprintf(" --no-phishing-restrictedscan Enable phishing
detection for all domains (might lead to false positives!)\n");
mprintf(" --phishing-ssl Always block SSL
mismatches in URLs (phishing module)\n");
mprintf(" --phishing-cloak Always block
cloaked URLs (phishing module)\n");
#endif
mprintf(" --no-algorithmic Disable
algorithmic detection\n");
mprintf(" --no-pe Disable PE
analysis\n");
mprintf(" --no-elf Disable ELF
support\n");
mprintf(" --no-ole2 Disable OLE2
support\n");
mprintf(" --no-pdf Disable PDF
support\n");
MrC
>
> I also use the MSRBL sigs and Sane-Security phishing and spam sigs. I
> see the Sane sigs catching most of the PDF spam.
>
> Lyle
>
> Michael McCandless wrote:
>> No, I did not enable-experimental when I compiled.
>>
>> -----Original Message-----
>> Sent: Tuesday, July 10, 2007 9:42 PM
>> To: ClamAV users ML
>> Subject: Re: [Clamav-users] scanPDF Usage
>>
>>
>> When you compiled clamav, did you enable-experimental?
>>
>> Lyle
>>
>> Michael McCandless wrote:
>>
>>> I am using Clamav (0.90.3), compiled from source, on Fedora Core 7. I
>>>
>> have
>>
>>> checked documentation, wiki, and mailing list archives.
>>>
>>> My clamd.conf file includes the following:
>>>
>>> # This option enables scanning within PDF files.
>>> # Default: no
>>> ScanPDF yes
>>>
>>> When I look at my clamd log file I see:
>>> PDF support disabled.
>>>
>>> I was expecting to see "PDF support enabled". I am getting lots of spam
>>> emails with PDF attachments, that's why I'm trying to get this option
>>> working.
>>>
>>>
>>> -------------------------
>>> Michael McCandless
>>> [EMAIL PROTECTED]
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
